PUA - SoftPerfect Netscan Execution

SigmaHQ Detections@sigmaHQ

•updated Mar 4, 2025•4•0•33

Detects the execution of 'netscan.exe' from SoftPerfect, a network scanning application. This tool is frequently used by threat actors for network reconnaissance to map out network architecture within compromised environments.