Network Share

A storage resource (typically a folder or drive) made available from one host to others using network protocols, such as Server Message Block (SMB) or Network File System (NFS)[1]

ID: DS0033
Platforms: Linux, Windows, macOS
Collection Layer: Host
Contributors: Center for Threat-Informed Defense (CTID)
Version: 1.0
Created: 20 October 2021
Last Modified: 10 November 2021

Data Components

Network Share: Network Share Access

Opening a network share, which makes the contents available to the requestor (ex: Windows EID 5140 or 5145)

Network Share: Network Share Access

Opening a network share, which makes the contents available to the requestor (ex: Windows EID 5140 or 5145)

Domain ID Name
Enterprise T1039 Data from Network Shared Drive
Enterprise T1570 Lateral Tool Transfer
Enterprise T1021 Remote Services
.002 SMB/Windows Admin Shares
Enterprise T1080 Taint Shared Content

References