StopAndProtect NetworkShareScanner SMB/USB Worm Execution
Detects the NetworkShareScanner SMB/USB worm by known hash or by unsigned-executable propagation to remote shares/removable drives.
Microsoft Sentinel (KQL)

Detects the NetworkShareScanner SMB/USB worm by known hash or by unsigned-executable propagation to remote shares/removable drives.

Already have an account?