cve.2021-42287 | Detection.FYI

Suspicious Computer Account Name Change CVE-2021-42287

Aug 12, 2024 · cve.2021-42287 detection.emerging-threats attack.defense-evasion attack.persistence attack.t1036 attack.t1098 ·
Share on:

Detects the renaming of an existing computer account to a account name that doesn't contain a $ symbol as seen in attacks against CVE-2021-42287

Read More
Win Susp Computer Name Containing Samtheadmin

Aug 12, 2024 · cve.2021-42278 cve.2021-42287 attack.persistence attack.privilege-escalation attack.t1078 ·
Share on:

Detects suspicious computer name samtheadmin-{1..100}$ generated by hacktool

Read More