Skip to content

DS0033 Network Share

A storage resource (typically a folder or drive) made available from one host to others using network protocols, such as Server Message Block (SMB) or Network File System (NFS)1

Item Value
ID DS0033
Platforms Linux, Windows, macOS
Collection Layers Host
Version 1.0
Created 20 October 2021
Last Modified 30 March 2022

Data Components

Network Share Access

Opening a network share, which makes the contents available to the requestor (ex: Windows EID 5140 or 5145)

Domain ID Name
enterprise T1486 Data Encrypted for Impact
ics T0811 Data from Information Repositories
enterprise T1039 Data from Network Shared Drive
enterprise T1570 Lateral Tool Transfer
ics T0867 Lateral Tool Transfer
enterprise T1021 Remote Services
enterprise T1021.002 SMB/Windows Admin Shares
ics T0886 Remote Services
enterprise T1080 Taint Shared Content