criticalstableEmerging Threat
Exploiting CVE-2019-1388
Detects an exploitation attempt in which the UAC consent dialogue is used to invoke an Internet Explorer process running as LOCAL_SYSTEM
windowsprocess_creation
2024-12-01
CVE-2019-1388 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2019. Coverage centers on windows / process_creation.
Detects an exploitation attempt in which the UAC consent dialogue is used to invoke an Internet Explorer process running as LOCAL_SYSTEM