mediumtestEmerging Threat
Potential RDP Exploit CVE-2019-0708
Detect suspicious error on protocol RDP, potential CVE-2019-0708
windowssystem
2022-12-25
CVE-2019-0708 is tracked here through 2 Sigma detections for exploitation attempts and related post-exploitation behavior observed in 2019. Coverage centers on windows / security, windows / system.
Detect suspicious error on protocol RDP, potential CVE-2019-0708
Detects the use of a scanner by zerosum0x0 that discovers targets vulnerable to CVE-2019-0708 RDP RCE aka BlueKeep