Potential Reconnaissance via gatherNetworkInfo.vbs Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•13

Detects the execution of the built-in Windows script 'gatherNetworkInfo.vbs' via cscript.exe or wscript.exe. This script is designed to gather detailed network information about the target machine, which can be leveraged by adversaries for reconnaissance purposes.