Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects PowerShell scripts leveraging System.Drawing and System.Windows.Forms to manipulate Metafile objects. This technique can be used to trigger a denial-of-service vulnerability (related to CVE-2025-53766) in the Windows GDI component by processing a specially crafted metafile.
avatar
Tim Peck@timpeck
avatar
Detections.ai Community
1 year ago
2078