Komari C2 - Lateral SMB Port Scanning (T1046)

Ibrahim Saud@tektrix

•updated Jun 22, 2026•4•0•2

Correlates the execution of an agent with rapid outbound connections to Port 445 across internal subnets, indicating SMB lateral movement or scanning activity.