Suspicious File Execution From Internet Hosted WebDav Share

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects the execution of the "net use" command to mount a WebDAV server and then immediately execute some content in it. As seen being used in malicious LNK files