SharePoint Web Shell Creation via CVE-2025-53770
Detects the creation of the "spinstall0.aspx" web shell in a SharePoint server directory, which is a known post-exploitation indicator for the SharePoint vulnerability CVE-2025-53770.
Sigma
Detects the creation of the "spinstall0.aspx" web shell in a SharePoint server directory, which is a known post-exploitation indicator for the SharePoint vulnerability CVE-2025-53770.
Already have an account?