HackTool - SysmonEOP Execution (8a7e90c5-fe6e-45dc-889e-057fe4378bd9)
Detects the execution of the PoC that can be used to exploit Sysmon CVE-2022-41120
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Exploitation for Privilege Escalation - T1068 (b21c3b2d-02e6-45b1-980b-e69051040839) | Attack Pattern | HackTool - SysmonEOP Execution (8a7e90c5-fe6e-45dc-889e-057fe4378bd9) | Sigma-Rules | 1 |