Rule Info
Name
IE ZoneMap Setting Downgraded To MyComputer Zone For HTTP Protocols Via CLI
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects changes to Internet Explorer's (IE / Windows Internet properties) ZoneMap configuration of the "HTTP" and "HTTPS" protocols to point to the "My Computer" zone. This allows downloaded files from the Internet to be granted the same level of trust as files stored locally.
Date
2023-09-05 00:00:00
Modified
None
Id
10344bb3-7f65-46c2-b915-2d00d47be5b0
Tags
attack.execution attack.defense_evasion DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR