hightestEmerging Threat
Exploiting SetupComplete.cmd CVE-2019-1378
Detects exploitation attempt of privilege escalation vulnerability via SetupComplete.cmd and PartnerSetupComplete.cmd described in CVE-2019-1378
windowsprocess_creation
2021-11-27
Emerging Threats
CVE2019
CVE-2019-1378
1Rules
1References
1Folders
2021-11-27Latest
Summary
CVE-2019-1378 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2019. Coverage centers on windows / process_creation.
Related Detections
Search this threatReferences