Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

CVE-2024-26234 and CVE-2024-29988

Steven Lim@KQLWizard

•updated Jul 1, 2025•2•0•54

KQL Query from file: CVE-2024-26234 and CVE-2024-29988

Microsoft Sentinel (KQL)

Tags

T1078 - Valid Accounts T1078.001 - Default Accounts T1078.003 - Local Accounts T1190 - Exploit Public-Facing Application T1210 - Exploitation of Remote Services TA0005 - Defense Evasion TA0003 - Persistence TA0004 - Privilege Escalation TA0001 - Initial Access TA0008 - Lateral Movement T1047 - Windows Management Instrumentation M1018 - User Account Management T1021.006 - Windows Remote Management M1016 - Vulnerability Scanning T1595.002 - Vulnerability Scanning T1212 - Exploitation for Credential Access DS0001 - Firmware T1069.002 - Domain Groups TA0002 - Execution TA0043 - Reconnaissance TA0006 - Credential Access TA0007 - Discovery Vulnerability Scan Detected Exploit Attempt Windows Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?