Microsoft Exchange ProxyNotShell Exploit Traffic

Rule Info

Id
72c31a3d-a63d-444d-82e9-7c39243f5fd5
Author
pH-T
Name
Microsoft Exchange ProxyNotShell Exploit Traffic
Tags
attack.execution
Date
2022-11-21 00:00:00
Modified
None
Description
Detects Microsoft Exchange exploit traffic for CVE-2022-41040 and CVE-2022-41082 (A.K.A ProxyNotShell)
Type
Nextron Sigma feed only (private)

Rule History