InstallerFileTakeOver LPE CVE-2021-41379 File Create Event

심각도 치명 Sigma 탐지 룰. Detects signs of the exploitation of LPE CVE-2021-41379 that include an msiexec process that creates an elevation_service.exe file

관련 CVE: CVE-2021-41379

작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본