Rule Info
Name
PUA - Execution of TNIWinAgent for Network Discovery
Author
Swachchhanda Shrawan Poudel (Nextron Systems)
Description
Detects the execution of TNIWinAgent, a component of SoftInventive Lab's Total Network Inventory Software.
While this tool is legitimate and used for network inventory and asset management, threat actors may abuse
for network discovery or reconnaissance purposes. Monitoring its execution can help identify potential misuse in an environment.
Date
2025-05-21 00:00:00
Modified
None
Id
ef946a44-5cc4-40f3-ab01-847a2da3616e
Tags
attack.discovery attack.t1046
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR