Track unusual file uploads to public shares and monitor for suspicious process execution following file writes.
Identification of an open or writable SMB share on the Fluffy machine. Fluffy0.8b.zip
Ensure SMB shares are not writable by anonymous or low-privileged users. Track unusual file uploads to public shares and
