Emerging Threats
Exploit2021
ProxyShell Exploit
2Rules
3References
1Folders
2023-01-02Latest
Summary
ProxyShell Exploit is tracked here as an exploit or named intrusion pattern with 2 Sigma detections spanning 2021. Coverage centers on webserver.
Related Detections
Search this threatEmerging Threathightest
Exchange ProxyShell Pattern
Detects URL patterns that could be found in ProxyShell exploitation attempts against Exchange servers (failed and successful)
Web Server Log
TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationdetection.emerging-threats
Florian Roth (Nextron Systems)+1Sat Aug 072021
Emerging Threatcriticaltest
Successful Exchange ProxyShell Attack
Detects URP patterns and status codes that indicate a successful ProxyShell exploitation attack against Exchange servers
Web Server Log
TA0001 · Initial Accessdetection.emerging-threats
Florian Roth (Nextron Systems)+1Mon Aug 092021
References