CVE2021

CVE-2021-42278

1Rules

1References

1Folders

2023-04-14Latest

Summary

CVE-2021-42278 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2021. Coverage centers on windows / system.

Related Detections

Search this threat

Emerging Threatmediumtest

Potential CVE-2021-42278 Exploitation Attempt

The attacker creates a computer object using those permissions with a password known to her. After that she clears the attribute ServicePrincipalName on the computer object. Because she created the object (CREATOR OWNER), she gets granted additional permissions and can do many changes to the object.

Windowssystem

TA0006 · Credential AccessT1558.003 · Kerberoastingcve.2021-42278detection.emerging-threats

François HubautWed Dec 152021

References

Resolving title…

cloudbrothers.info