1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Audit: SMB Admin Share Connect Request

Audit: SMB Admin Share Connect Request

Severity: Low

This attack poses a minor threat. Corrective action may not be possible or is not required.

Description

This signature detects attempts to connect to ADMIN$ share.

Additional Information

ADMIN$ shares is a hidden share that allow administrator to connect to it and perform various management related tasks.

Affected

  • Various Windows platforms.

Response


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube