ATT&CK technique
View on MITRE ATT&CK →
T1039
Data from Network Shared Drive
Collection
7 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows Network Share Interaction Via Net | production | 2026-10-02 |
| elastic | Unusual Remote File Size | production | 2026-09-18 |
| elastic | First Time Seen NFS AUTH_SYS Root UID Access | production | 2026-09-18 |
| elastic | PowerShell Share Enumeration Script | production | 2026-09-18 |
| elastic | PowerShell Suspicious Discovery Related Windows API Functions | production | 2026-09-18 |
| sigma | Copy From Or To Admin Share Or Sysvol Folder | test | 2025-10-22 |
| sigma | Suspicious Access to Sensitive File Extensions | test | 2025-10-17 |