ATT&CK technique
View on MITRE ATT&CK →
T1070.005
Network Share Connection Removal
Stealth
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Create or delete windows shares using net exe | production | 2026-10-09 |
| sigma | PowerShell Deleted Mounted Share | test | 2025-10-07 |
| sigma | Disable Administrative Share Creation at Startup | test | 2024-03-25 |
| sigma | MaxMpxCt Registry Value Changed | test | 2024-03-19 |
| sigma | Unmount Share Via Net.EXE | test | 2023-02-21 |