Suspicious External WebDAV Execution

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•0•1

Detects executables launched from external WebDAV shares using the WebDAV Explorer integration, commonly seen in initial access campaigns.