Akira: SoftPerfect Network Scanner and Invoke-ShareFinder Share Enumeration

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•1

This rule detects the execution of common network share enumeration tools or scripts, specifically looking for the execution of netscan.exe (or similar) or PowerShell commands utilizing common share finding utilities like Invoke-ShareFinder, CheckShareAccess, or commands exporting share information to files.