GatherNetworkInfo.VBS Reconnaissance Script Output File Creation

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•17

Detects the creation of specific output files generated by the built-in Windows reconnaissance script "C:\Windows\System32\gatherNetworkInfo.vbs". This script is known to be used by adversaries for system and network information discovery.