Lateral movement by mounting a network share - net use (command)
Detects scenarios where an attacker attempts to move laterally by mounting a network share using compromised user credentials.
Sigma

Detects scenarios where an attacker attempts to move laterally by mounting a network share using compromised user credentials.

Already have an account?