Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects an exploitation attempt of CVE-2019-1388, a privilege escalation vulnerability. This involves the UAC consent dialogue (consent.exe) invoking an Internet Explorer process (iexplore.exe) with system-level privileges, indicated by 'System' or 'S-1-16-16384' integrity level and a command line containing ' http'.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
2033