CVE-2021-42287 | Detection.FYI

Potential CVE-2021-42287 Exploitation Attempt

Nov 10, 2025 · attack.credential-access attack.t1558.003 detection.emerging-threats cve.2021-42287 ·
Share on:

The attacker creates a computer object using those permissions with a password known to her. After that she clears the attribute ServicePrincipalName on the computer object. Because she created the object (CREATOR OWNER), she gets granted additional permissions and can do many changes to the object.

Read More
Suspicious Computer Account Name Change CVE-2021-42287

Oct 23, 2025 · attack.privilege-escalation attack.defense-evasion attack.persistence attack.t1036 attack.t1098 cve.2021-42287 detection.emerging-threats ·
Share on:

Detects the renaming of an existing computer account to a account name that doesn't contain a $ symbol as seen in attacks against CVE-2021-42287

Read More