Analytics BIOC
Informational
✕
Linux network share discovery
An adversary might use known tools to discover SMB shares within the compromised network.
- Module:
- Platform Analytics
- Data source:
- XDR Agent
ATT&CK tactics: Discovery (TA0007)
ATT&CK techniques: Network Share Discovery (T1135)
Attacker's goals:
Exfiltrate or hide sensitive data.
Investigative actions:
Check if the action was done using an automation service. Check if there are any other suspicious activities originated from the same machine/executing user.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day