fix: print driver FP

This commit is contained in:
Florian Roth
2021-12-01 14:14:53 +01:00
parent 5a01a88af1
commit 6b7206ca2a
@@ -9,7 +9,7 @@ references:
- https://github.com/afwu/PrintNightmare
- https://github.com/cube0x0/CVE-2021-1675
date: 2021/06/29
modified: 2021/07/01
modified: 2021/12/01
tags:
- attack.execution
- attack.privilege_escalation
@@ -22,8 +22,7 @@ logsource:
detection:
selection:
TargetFilename|contains:
- 'C:\Windows\System32\spool\drivers\x64\3\old\1\123'
- 'C:\Windows\System32\spool\drivers\x64\3\New\'
- 'C:\Windows\System32\spool\drivers\x64\3\old\1\123'
condition: selection
fields:
- ComputerName