Mexican Mafia Impacket Lateral Movement

Ibrahim Saud@tektrix

•updated Jun 23, 2026•0•0•5

Detects use of Impacket tooling (wmiexec, psexec, smbexec, atexec, secretsdump) for lateral movement and remote service execution.