StrikeShark FScan/Searchall Post-Compromise Network Reconnaissance

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•2

Detects the execution of known StrikeShark post-compromise reconnaissance tools, specifically fscan.exe and searchall.exe, as well as associated administrative commands used for domain group and trust discovery in Windows environments.