APT36 RUSTYSHADE Network Discovery via Ping Sweep and SMB Enumeration

Ibrahim Saud@tektrix

•updated 20 days ago•0•0•1

Detects network discovery activities including ICMP sweeps, ARP cache checks, and SMB share/session enumeration, which are common tactics used for internal reconnaissance by the threat group APT36 (Transparent Tribe).