SMBExec Lateral Movement Execution Pattern
Detects the command line pattern characteristic of Impacket's SMBExec, involving echoing a payload to a temporary batch file, executing, and deleting it. Threat actors use this for rapid lateral movement.
Microsoft Sentinel (KQL)
