CVE-2023-38331 Exploitation Attempt - Suspicious WinRAR Child Process

심각도 높음 Sigma 탐지 룰. Detects exploitation attempt of CVE-2023-38331 (WinRAR before v6.23), where an attacker can leverage WinRAR to execute arbitrary commands an…

관련 CVE: CVE-2023-38331, CVE-2023-38831

작성자: Nasreddine Bencherchali (Nextron Systems), Andreas Braathen (mnemonic.io) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본