hightestEmerging Threat
CVE-2022-24527 Microsoft Connected Cache LPE
Detects files created during the local privilege exploitation of CVE-2022-24527 Microsoft Connected Cache
windowsfile_event
2022-04-13
CVE-2022-24527 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2022. Coverage centers on windows / file_event.
Detects files created during the local privilege exploitation of CVE-2022-24527 Microsoft Connected Cache