SIEM Consulting
Market
& News
Closing snapshots unavailable

Platforms / Security resources

MITRE ATT&CK

Enterprise v20 / 15 tactics / 227 techniques / 479 sub-techniques

Stealth / T1070.005

Network Share Connection Removal

Sub-technique / Enterprise ATT&CK

Official MITRE entry

Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation. Windows shared drive and SMB/Windows Admin Shares connections can be removed when no longer needed. Net is an example utility that can be used to remove network share connections with the net use \system\share /delete command. (Citation: Technet Net Use)

Platforms
Windows
MITRE record updated
May 12, 2026

Parent technique: T1070 Indicator Removal

Source references

Source: MITRE ATT&CK Enterprise v20, retrieved 2026-10-31. MITRE ATT&CK is a registered trademark of The MITRE Corporation.