Terminal Service Process Spawn

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•4

Detects a process spawned by the terminal service server process (this could be an indicator for an exploitation of CVE-2019-0708)