Rule Info
Name
HackTool - Potential Impacket Atexec Execution
Author
Swachchhanda Shrawan Poudel (Nextron Systems)
Description
Detects the use of Impacket's atexec tool. Atexec, included in the Impacket suite, enables attackers to execute commands on remote systems.
Reference
Date
2025-02-07 00:00:00
Modified
None
Id
cda205fa-c899-4d25-81e1-938f495b9998
Tags
attack.execution attack.t1047 attack.lateral-movement attack.t1021.003
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR