CVE2020

CVE-2020-1350

1Rules

2References

1Folders

2022-07-12Latest

Summary

CVE-2020-1350 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2020. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatcriticaltest

DNS RCE CVE-2020-1350

Detects exploitation of DNS RCE bug reported in CVE-2020-1350 by the detection of suspicious sub process

WindowsProcess Creation

TA0001 · Initial AccessT1190 · Exploit Public-Facing ApplicationTA0002 · ExecutionT1569.002 · Service Execution+2

Florian Roth (Nextron Systems)Wed Jul 152020

References

Resolving title…

research.checkpoint.com

Resolving title…

web.archive.org