Suspicious New-PSDrive to Admin Share

심각도 보통 Sigma 탐지 룰. Adversaries may use to interact with a remote network share using Server Message Block (SMB). The adversary may then perform actions as the …

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본