Share And Session Enumeration Using Net.EXE

SigmaHQ Detections@sigmaHQ

•updated Nov 24, 2025•0•0•0

Detects attempts to enumerate file shares, printer shares and sessions using "net.exe" with the "view" flag.