Exploit for CVE-2017-0261

심각도 보통 Sigma 탐지 룰. Detects Winword starting uncommon sub process FLTLDR.exe as used in exploits for CVE-2017-0261 and CVE-2017-0262

관련 CVE: CVE-2017-0261, CVE-2017-0262

작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본