criticalstableEmerging Threat
Droppers Exploiting CVE-2017-11882
Detects exploits that use CVE-2017-11882 to start EQNEDT32.EXE and other sub processes like mshta.exe
windowsprocess_creation
2021-11-27
Emerging Threats
CVE2017
CVE-2017-11882
1Rules
3References
1Folders
2021-11-27Latest
Summary
CVE-2017-11882 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2017. Coverage centers on windows / process_creation.
Related Detections
Search this threatReferences