Robuta

https://www.elastic.co/docs/reference/security/prebuilt-rules/rules_building_block/discovery_net_share_discovery_winlog Potential Network Share Discovery | Prebuilt detection rules reference Adversaries may look for folders and drives shared on remote systems to identify sources of information to gather as a precursor for collection and identify... network share discoverydetection rulespotentialprebuiltreference https://www.splunk.com/en_us/blog/security/sharing-is-not-caring-hunting-for-file-share-discovery.html Sharing is Not Caring: Hunting for Network Share Discovery | Splunk This post offers a practical guide to enhancing detection strategies against network share discovery, a technique often used by threat actors. network share discoverysharingcaringhuntingsplunk