fix: print driver FP
This commit is contained in:
@@ -9,7 +9,7 @@ references:
|
||||
- https://github.com/afwu/PrintNightmare
|
||||
- https://github.com/cube0x0/CVE-2021-1675
|
||||
date: 2021/06/29
|
||||
modified: 2021/07/01
|
||||
modified: 2021/12/01
|
||||
tags:
|
||||
- attack.execution
|
||||
- attack.privilege_escalation
|
||||
@@ -22,8 +22,7 @@ logsource:
|
||||
detection:
|
||||
selection:
|
||||
TargetFilename|contains:
|
||||
- 'C:\Windows\System32\spool\drivers\x64\3\old\1\123'
|
||||
- 'C:\Windows\System32\spool\drivers\x64\3\New\'
|
||||
- 'C:\Windows\System32\spool\drivers\x64\3\old\1\123'
|
||||
condition: selection
|
||||
fields:
|
||||
- ComputerName
|
||||
|
||||
Reference in New Issue
Block a user