Rule Info
Tags
attack.resource_development DEMO attack.t1587.001
Modified
None
Author
Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems)
Name
Potential PsExec Remote Execution
Description
Detects potential psexec command that initiate execution on a remote systems via common commandline flags used by the utility
Date
2023-02-28 00:00:00
Id
ea011323-7045-460b-b2d7-0f7442ea6b38
Type
Community Rule
Link to Public Repo
Rule History
Commit
Date
Author
Title
Scan your endpoints, forensic images or collected files with our portable scanner THOR