t1072 | LoFP

t1072

Title	Tags
legitimate adminstrative usage of this functionality will trigger this detection.	t1021.007 t1072 t1105 t1202 t1484 t1529 t1562.001 t1562.004 azure tenant splunk
legitimate usage by software developers	t1072 t1218 windows sigma
legitimate use	t1005 t1040 t1059 t1072 t1090 t1124 t1127 t1219 t1484 t1484.001 t1546 t1546.015 t1555 t1555.003 t1562 t1562.001 windows sigma
while legitimate, these nirsoft tools are prone to abuse. you should verfiy that the tool was used for a legitimate purpose.	t1072 endpoint splunk