CVE-2021-1675

Antivirus PrinterNightmare CVE-2021-34527 Exploit Detection

Oct 28, 2023 · attack.privilege_escalation attack.t1055 ·

Detects the suspicious file that is created from PoC code against Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-34527 (PrinterNightmare), CVE-2021-1675 .

CVE-2021-1675 Print Spooler Exploitation Filename Pattern

Oct 26, 2023 · attack.execution attack.privilege_escalation attack.resource_development attack.t1587 cve.2021.1675 detection.emerging_threats ·

Share on:

Detects the default filename used in PoC code against print spooler vulnerability CVE-2021-1675

CVE-2021-1675 Print Spooler Exploitation IPC Access

Oct 15, 2023 · attack.execution attack.t1569 cve.2021.1675 cve.2021.34527 detection.emerging_threats ·

Share on:

Detects remote printer driver load from Detailed File Share in Security logs that are a sign of successful exploitation attempts against print spooler vulnerability CVE-2021-1675 and CVE-2021-34527

Possible CVE-2021-1675 Print Spooler Exploitation

Oct 15, 2023 · attack.execution attack.t1569 cve.2021.1675 detection.emerging_threats ·

Share on:

Detects events of driver load errors in print service logs that could be a sign of successful exploitation attempts of print spooler vulnerability CVE-2021-1675

CVE-2021-1675 Print Spooler Exploitation

Jun 20, 2023 · attack.execution attack.t1569 cve.2021.1675 detection.emerging_threats ·

Share on:

Detects driver load events print service operational log that are a sign of successful exploitation attempts against print spooler vulnerability CVE-2021-1675