Unmount Share Via Net.EXE

심각도 낮음 Sigma 탐지 룰. Detects when when a mounted share is removed. Adversaries may remove share connections that are no longer useful in order to clean up traces…

작성자: oscd.community, @redcanary, Zach Stanford @svch0st · 원본 라이선스: DRL 1.1 · SigmaHQ 원본