Impacket SMBexec service creation (registry)
Detects scenarios where an attacker attempts to register the SMBexec service to estasblish persistence.
Sigma

Detects scenarios where an attacker attempts to register the SMBexec service to estasblish persistence.

Already have an account?