1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Audit: Impacket Tool Activity

Audit: Impacket Tool Activity

Severity: Low

This attack poses a minor threat. Corrective action may not be possible or is not required.

Description

This signature detects SMB traffic generated using impacket library.

Additional Information

Impacket is a library that's used to work with protocols. It can be used to generate network traffic related to protocols including but not limited to SMB, MSRPC etc.

Affected

  • Various platforms.

Response


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube