Zerologon Exploitation Using Well-known Tools

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•2

This rule is designed to detect attempts to exploit Zerologon (CVE-2020-1472) vulnerability using mimikatz zerologon module or other exploits from machine with "kali" hostname.