Rule Info
Name
Potential CVE-2024-35250 Exploitation Activity
Author
@eyezuhk Isaac Fernandes
Description
Detects potentially suspicious loading of "ksproxy.ax", which may indicate an attempt to exploit CVE-2024-35250.
Date
2025-02-19 00:00:00
Modified
None
Id
17ce9373-2163-4a2c-90ba-f91e9ef7a8c1
Tags
attack.privilege-escalation attack.t1068 cve.2024-35250 detection.emerging-threats
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Isaac Fernandes
Merge PR #5136 from @Eyezuhk - Add `Potential CVE-2024-35250 Exploitation Activity`
2025-02-24
Scan your endpoints, forensic images or collected files with our portable scanner THOR