CVE2022

CVE-2022-24527

1Rules

1References

1Folders

2022-04-13Latest

Summary

CVE-2022-24527 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2022. Coverage centers on windows / file_event.

Related Detections

Search this threat

Emerging Threathightest

CVE-2022-24527 Microsoft Connected Cache LPE

Detects files created during the local privilege exploitation of CVE-2022-24527 Microsoft Connected Cache

WindowsFile Event

TA0002 · ExecutionTA0004 · Privilege EscalationT1059.001 · PowerShellcve.2022-24527+1

Florian Roth (Nextron Systems)Wed Apr 132022

References

Resolving title…

rapid7.com