CVE2020

CVE-2020-0688

3Rules

3References

1Folders

2023-01-02Latest

Summary

CVE-2020-0688 is tracked here through 3 Sigma detections for exploitation attempts and related post-exploitation behavior observed in 2020. Coverage centers on webserver, windows / application.

Related Detections

Search this threat

Emerging Threatcriticaltest

CVE-2020-0688 Exchange Exploitation via Web Log

Detects the exploitation of Microsoft Exchange vulnerability as described in CVE-2020-0688

Web Server Log

TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationcve.2020-0688detection.emerging-threats

Florian Roth (Nextron Systems)Sat Feb 292020

Emerging Threathightest

CVE-2020-0688 Exploitation Attempt

Detects CVE-2020-0688 Exploitation attempts

Web Server Log

TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationcve.2020-0688detection.emerging-threats

NVISOThu Feb 272020

Emerging Threathightest

CVE-2020-0688 Exploitation via Eventlog

Detects the exploitation of Microsoft Exchange vulnerability as described in CVE-2020-0688

Windowsapplication

TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationcve.2020-0688detection.emerging-threats

Florian Roth (Nextron Systems)+1Sat Feb 292020

References