1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Audit: Bad Reputation File SMB Request

Audit: Bad Reputation File SMB Request

Severity: Low

This attack poses a minor threat. Corrective action may not be possible or is not required.

Description

This signature detects attempts made by bad reputation files to laterally move in the network.

Additional Information

Malwares can be equipped with network propagation feature that can help them move laterally from one machine to another on a network. SMB protocol is one of the common protocols used by malware to achieve lateral movement.

Affected

  • Various Platforms.

Response


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube