Rule Info
Name
CVE-2024-49113 Exploitation Attempt - LDAP Nightmare
Author
Samuel Monsempes
Description
Detects exploitation attempt of CVE-2024-49113 known as LDAP Nightmare, based on "Application Error" log where the faulting application is "lsass.exe" and the faulting module is "WLDAP32.dll".
Date
2025-01-08 00:00:00
Modified
None
Id
3f2c93c7-7b2a-4d58-bb8d-6f39422d8148
Tags
attack.impact attack.t1499 cve.2024-49113 detection.emerging-threats
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
samuelmonsempessenthorus
Merge PR #5155 from @samuelmonsempessenthorus - Add `CVE-2024-49113 Exploitation Attempt - LDAP Nightmare`
2025-01-08
Scan your endpoints, forensic images or collected files with our portable scanner THOR