Hunts for lateral movement via remote service creation, admin share writes, and remote WMI process creation by correlating Windows logon, service install, and process-creation events. Activates for requests to hunt lateral movement, detect PsExec/WMIexec activity, or find remote execution over SMB and WMI.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
meltedinhex/analyst-ai-pack222026년 7월 7일 업데이트