CVE2022

CVE-2022-26809

1Rules

4References

1Folders

2023-02-03Latest

Summary

CVE-2022-26809 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2022. Coverage centers on windows / process_creation.

Related Detections

Search this threat

hightestEmerging Threat

Potential CVE-2022-26809 Exploitation Attempt

Detects suspicious remote procedure call (RPC) service anomalies based on the spawned sub processes (long shot to detect the exploitation of vulnerabilities like CVE-2022-26809)

windowsprocess_creation

2023-02-03

References