Share And Session Enumeration Using Net.EXE — Detection Rule
Detects attempts to enumerate file shares, printer shares and sessions using "net.exe" with the "view" flag.
Detects attempts to enumerate file shares, printer shares and sessions using "net.exe" with the "view" flag.