Akira - Invoke-ShareFinder and SoftPerfect Network Share Discovery

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•2

Detects reconnaissance activity associated with Akira ransomware, including PowerShell-based share enumeration (Invoke-ShareFinder, Get-NetShare), execution of unauthorized network scanning tools (e.g., SoftPerfect NetScan from non-standard paths), and the use of 'net view /domain' commands to identify accessible network resources.