Rule Info
Author
Christian Burkard
Minimum Yara
1.7
Name
SUSP_Msdt_Artefact_Jun22_2
Date
2022-06-01
Description
Detects suspicious pattern in msdt diagnostics log (e.g. CVE-2022-30190)
Tags
['FILE', 'EXPLOIT', 'DEMO', 'CVE_2022_30190', 'SUSP']
Score
75
Modified
2022-07-29
Av Ratio
0
Required Modules
[]
Rule Hash
e0c24ad6952cd97bfb77c1b3f520a9f5
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
0
Clean (0 engines)
0
Rule Matches
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR