CVE2019

CVE-2019-1378

1Rules

1References

1Folders

2021-11-27Latest

Summary

CVE-2019-1378 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2019. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathightest

Exploiting SetupComplete.cmd CVE-2019-1378

Detects exploitation attempt of privilege escalation vulnerability via SetupComplete.cmd and PartnerSetupComplete.cmd described in CVE-2019-1378

WindowsProcess Creation

TA0003 · PersistenceTA0005 · StealthTA0004 · Privilege EscalationT1068 · Exploitation for Privilege Escalation+5

Florian Roth (Nextron Systems)+2Fri Nov 152019

References

Resolving title…

web.archive.org