WEB_MISC net attempt

 

Code: p1232

Severity: Warning

 

Description: This event is generated when the NET command is used for message sending, remote null session connections etc.

Impact: Information gathering.

Corrective: Protect "net.exe" from remote usage. Remove the file completly if it is not needed.