cve.2021.42287 | Detection.FYI

Win Susp Computer Name Containing Samtheadmin

Nov 2, 2023 · cve.2021.42278 cve.2021.42287 attack.persistence attack.privilege_escalation attack.t1078 ·
Share on:

Detects suspicious computer name samtheadmin-{1..100}$ generated by hacktool

Read More
Suspicious Computer Account Name Change CVE-2021-42287

Aug 28, 2023 · cve.2021.42287 detection.emerging_threats attack.defense_evasion attack.persistence attack.t1036 attack.t1098 ·
Share on:

Detects the renaming of an existing computer account to a account name that doesn't contain a $ symbol as seen in attacks against CVE-2021-42287

Read More