RA3113: Inspect Network Shares

Summary

ID	RA3113
Brief Description	Inspect network shares
Author	@SEC
Creation Date	2023/05/20
References	https://github.com/certsocietegenerale/IRM/blob/main/EN/IRM-2-WindowsIntrusion.pdf
Response Stage	Containment

Description

Inspect network shares or any publicly accessible folders shared with other users to see if the malware has spread through it.