T1126W - Network Share Connection Removal
daniel-infosec opened this issue · comments
Description
Windows shared drive and Windows Admin Shares connections can be removed when no longer needed. Net is an example utility that can be used to remove network share connections with the net use \system\share /delete command. [1]
Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.