Adobe Acrobat DC JavaScript Global Object Access Enabled

Rule Info

Name
Adobe Acrobat DC JavaScript Global Object Access Enabled
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects registry changes to Adobe's Acrobat JavaScript configuration. Setting the "bEnableGlobalSecurity" value to "Enabled" will make JavaScript objects globally accessible.
Reference
https://helpx.adobe.com/acrobat/using/javascripts-pdfs-security-risk.html
Date
2024-08-05 00:00:00
Modified
None
Id
9561f95a-00d0-4fdd-b7cf-847409d6dc0a
Tags
attack.defense-evasion
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022