Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Emerging Threats
    CVE2021

    CVE-2021-42278

    1Rules
    1References
    1Folders
    2023-04-14Latest
    Summary

    CVE-2021-42278 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2021. Coverage centers on windows / system.

    Related Detections
    Search this threat
    1 rulesInspect a rule without leaving your results.
    mediumtestEmerging Threat

    Potential CVE-2021-42278 Exploitation Attempt

    The attacker creates a computer object using those permissions with a password known to her. After that she clears the attribute ServicePrincipalName on the computer object. Because she created the object (CREATOR OWNER), she gets granted additional permissions and can do many changes to the object.

    windowssystem
    2023-04-14
    References
    1
    Resolving title…
    cloudbrothers.info