CVE2020

CVE-2020-1472

1Rules

2References

1Folders

2022-02-12Latest

Summary

CVE-2020-1472 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2020. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathightest

Exploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC

Detects the execution of the commonly used ZeroLogon PoC executable.

WindowsProcess Creation

TA0002 · ExecutionTA0008 · Lateral MovementT1210 · Exploitation of Remote Servicescve.2020-1472+1

kostastsale+1Sat Feb 122020

References