cve.2021-42287 | Detection.FYI

Win Susp Computer Name Containing Samtheadmin

Jun 4, 2025 · cve.2021-42278 cve.2021-42287 attack.persistence attack.privilege-escalation attack.t1078 ·
Share on:

Detects suspicious computer name samtheadmin-{1..100}$ generated by hacktool

Read More
Suspicious Computer Account Name Change CVE-2021-42287

Jan 30, 2025 · attack.defense-evasion attack.persistence attack.t1036 attack.t1098 cve.2021-42287 detection.emerging-threats ·
Share on:

Detects the renaming of an existing computer account to a account name that doesn't contain a $ symbol as seen in attacks against CVE-2021-42287

Read More