StrikeShark FScan and Searchall Internal Reconnaissance Detection
Detects post-exploitation activities associated with the StrikeShark framework, specifically the use of FScan and Searchall tools for internal network port scanning and domain group enumeration using built-in Windows net commands.
Microsoft Sentinel (KQL)

