File And SubFolder Enumeration Via Dir Command

SigmaHQ Detections@sigmaHQ

•updated Oct 9, 2025•0•12

Detects the use of the 'dir' command with the '/S' flag, which enumerates files and subdirectories. This can be used by adversaries for discovery purposes to understand the file system structure and locate interesting files.