Hunts for lateral movement via remote service creation, admin share writes, and remote WMI process creation by correlating Windows logon, service install, and process-creation events. Activates for requests to hunt lateral movement, detect PsExec/WMIexec activity, or find remote execution over SMB and WMI.
日本語の概要は準備中です。原文の説明を表示しています。
meltedinhex/analyst-ai-pack222026年7月7日 更新