Windows Share Mount Via Net.EXE

Rule Info

Name

Windows Share Mount Via Net.EXE

Author

Nasreddine Bencherchali (Nextron Systems)

Description

Detects when a share is mounted using the "net.exe" utility

Reference

https://drive.google.com/file/d/1lKya3_mLnR3UQuCoiYruO3qgu052_iS_/view

Date

2023-02-02 00:00:00

Modified

2023-02-21 00:00:00

f117933c-980c-4f78-b384-e3d838111165

Rule History

Author

Title

Date

Commit

github-actions[bot]

chore: promote older rules status from `experimental` to `test` (#4651)

2024-01-01

c3fe2da99

Nasreddine Bencherchali

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18

95793d73b

Nasreddine Bencherchali

feat: multiple fixes and updates

2023-02-21

63888f7a5

Nasreddine Bencherchali

fix: apply escape suggestion

2023-02-02

8fc7f741d

Nasreddine Bencherchali

fix: add missing modified field

2023-02-02

d08acc18a

Nasreddine Bencherchali

feat: more updates

2023-02-02

0663b4e3f

frack113

old experimental rule promotion

2022-10-09

931fb3085

frack113

Normalization of rule names

2022-02-22

8bb3379b6

frack113

Order rules

2021-12-04

e215f4606

Bhabesh Rai

Merging upstream updates

2021-07-01

206adbb2b

wagga40

Added missing "modified" fields. Removed trailing wildcard.

2021-06-27

d6afa46e6

wagga40

Updated rules with modifiers instead of '*' and remove trailing '\\'

2021-06-27

11df697cd

svch0stz

Update win_net_use_admin_share.yml

2020-10-07

ca0f2146a

svch0stz

Create win_net_use_admin_share.yml

2020-10-05

c82d5ac08