Exploit2021

RazerInstaller LPE Exploit

1Rules

2References

1Folders

2024-12-01Latest

Summary

RazerInstaller LPE Exploit is tracked here as an exploit or named intrusion pattern with 1 Sigma detection spanning 2021. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathightest

Suspicious RazerInstaller Explorer Subprocess

Detects a explorer.exe sub process of the RazerInstaller software which can be invoked from the installer to select a different installation folder but can also be exploited to escalate privileges to LOCAL SYSTEM

WindowsProcess Creation

TA0005 · StealthTA0004 · Privilege EscalationT1553 · Subvert Trust Controlsdetection.emerging-threats

Florian Roth (Nextron Systems)+1Mon Aug 232021

References