Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "CVE-2020-1472"

3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threathightest

Exploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC

Detects the execution of the commonly used ZeroLogon PoC executable.

WindowsProcess Creation
kostastsale+1Sat Feb 122020