DETECTION OVERVIEW
Risk Factors
It is both relatively easy and not uncommon for attackers to gain access to file shares. Depending on the sensitivity of the files in the accessed file share, the impact can be devastating if it results in a leak of important, proprietary, or customer data.
The system might change the risk score for this detection.
Kill Chain
Risk Score
60
After an attacker has compromised a workstation and obtained a valid set of credentials, they can proceed with malicious activity that might be overlooked as normal file share activity. The primary difference is that the attacker is looking for sensitive or valuable information that they can leverage for malicious objections, such as in a data breach.