Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Emerging Threats
    CVE2021

    CVE-2021-26857

    1Rules
    1References
    1Folders
    2023-02-07Latest
    Summary

    CVE-2021-26857 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2021. Coverage centers on windows / process_creation.

    Related Detections
    Search this threat
    1 rulesInspect a rule without leaving your results.
    highstableEmerging Threat

    Potential CVE-2021-26857 Exploitation Attempt

    Detects possible successful exploitation for vulnerability described in CVE-2021-26857 by looking for | abnormal subprocesses spawning by Exchange Server's Unified Messaging service

    windowsprocess_creation
    2023-02-07
    References
    1
    Resolving title…
    microsoft.com