hightestEmerging Threat
Potential BearLPE Exploitation
Detects potential exploitation of the BearLPE exploit using Task Scheduler ".job" import arbitrary DACL write\par
windowsprocess_creation
2023-01-26
BearLPE Exploit is tracked here as an exploit or named intrusion pattern with 1 Sigma detection spanning 2019. Coverage centers on windows / process_creation.
Detects potential exploitation of the BearLPE exploit using Task Scheduler ".job" import arbitrary DACL write\par