Skip to content

Hide Navigation Hide TOC

File And SubFolder Enumeration Via Dir Command (7c9340a9-e2ee-4e43-94c5-c54ebbea1006)

Detects usage of the "dir" command part of Widows CMD with the "/S" command line flag in order to enumerate files in a specified directory and all subdirectories.

Cluster A Galaxy A Cluster B Galaxy B Level
Browser Information Discovery - T1217 (5e4a2073-9643-44cb-a0b5-e7f4048446c7) Attack Pattern File And SubFolder Enumeration Via Dir Command (7c9340a9-e2ee-4e43-94c5-c54ebbea1006) Sigma-Rules 1