https://www.elastic.co/docs/reference/security/prebuilt-rules/rules/windows/lateral_movement_executable_tool_transfer_smb
Potential Lateral Tool Transfer via SMB Share | Prebuilt detection rules reference
Identifies the creation or change of a Windows executable file over network shares. Adversaries may transfer tools or other files between systems in a...
lateral tool transferdetection rulespotentialvia