Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Net.EXE Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa

•updated Jun 24, 2025•0•8

Detects execution of "Net.EXE".

Sigma

Tags

TA0007 - Discovery T1007 - System Service Discovery T1049 - System Network Connections Discovery T1018 - Remote System Discovery T1135 - Network Share Discovery T1201 - Password Policy Discovery T1069.001 - Local Groups T1069.002 - Domain Groups T1087.001 - Local Account T1087.002 - Domain Account TA0008 - Lateral Movement T1021.002 - SMB/Windows Admin Shares S0039 - Net Process Creation Windowsattack.discoveryattack.t1007attack.t1049attack.t1018attack.t1135attack.t1201attack.t1069.001attack.t1069.002attack.t1087.001attack.t1087.002attack.lateral-movementattack.t1021.002attack.s0039detection.threat-hunting

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?