criticaltestEmerging Threat
Exploit for CVE-2017-8759
Detects Winword starting uncommon sub process csc.exe as used in exploits for CVE-2017-8759
windowsprocess_creation
2021-11-27
CVE-2017-8759 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2017. Coverage centers on windows / process_creation.
Detects Winword starting uncommon sub process csc.exe as used in exploits for CVE-2017-8759