Sensitive Files or RPC Endpoints Access via Network Share

Luís Marques@remotecodeexecution

•updated May 11, 2026•1•0•79

Detects access to sensitive files, credential data, or remote procedure call (RPC) endpoints related to credential dumping over a network share. This could indicate lateral movement or remote credential harvesting techniques.