security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

doc: adding another reference

Browse Source
This commit is contained in:
Florian Roth
2023-01-22 11:03:59 +01:00
parent f2d633ad1a
commit e95f0d03b4
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/proc_creation_win_susp_win_server_undocumented_rce.yml
+1
View File
@@ -4,6 +4,7 @@ status: experimental
description: Detects potential exploitation attempt of undocumented Windows Server Pre Auth Remote Code Execution (RCE)
references:
- https://twitter.com/YanZiShuang/status/1616777483646533632?s=20&t=TQT9tUuPbQJai4v6HtsOQw
- https://twitter.com/hackerfantastic/status/1616455335203438592?s=20
author: Florian Roth, Nasreddine Bencherchali
date: 2023/01/21
logsource: