Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects bulk file enumeration/access across multiple users' virtual desktop profile shares via a compromised root DFS drive, which CISA's red team used to read local files of all users regardless of active session.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
308