hightestEmerging Threat
Exploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC
Detects the execution of the commonly used ZeroLogon PoC executable.
windowsprocess_creation
2022-02-12
CVE-2020-1472 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2020. Coverage centers on windows / process_creation.
Detects the execution of the commonly used ZeroLogon PoC executable.