ProxyLogon MSExchange OabVirtualDirectory

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects specific patterns found after a successful ProxyLogon exploitation in relation to a Commandlet invocation of Set-OabVirtualDirectory