On Detection, Information Security, Research, Detection Engineering.
(behavior) itself. NetSessionEnum In their descriptions of User Hunting, Harmj0y and Rohan mentioned one Windows API function that was particularly interesting: NetSessionEnum. As a part of the Win32 API, you can find the NetSessionEnum documented online. Below is an image of the function’s