Windows Share Mount Via Net.EXE — Detection Rule

Detects when a share is mounted using the "net.exe" utility

Read the full analysis on IntelFusions