File And SubFolder Enumeration Via Dir Command — Detection Rule

Detects usage of the "dir" command part of Windows CMD with the "/S" command line flag in order to enumerate files in a specified directory and all subdirectories.

Read the full analysis on IntelFusions