CVE-2026-24294 Impacket smbserver.py Rogue SMB Server Execution

Detects the execution of Python-based SMB server implementations commonly associated with the Impacket toolset. Impacket is frequently used by attackers to facilitate lateral movement, credential relay, and remote file manipulation.