Reynolds Ransomware Network Share and Logical Drive Enumeration

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•1

Detects attempts to discover network shares and remote systems using 'net share', 'net view' commands, or by accessing UNC paths with extended path prefixes, which can be indicative of lateral movement or reconnaissance activities.