Microsoft Exchange Pool Exploit

Rule Info

Name
Microsoft Exchange Pool Exploit
Author
pH-T
Description
Detects Microsoft Exchange exploit abusing Exchange pools
Reference
https://github.com/testanull/ProxyNotShell-PoC
Date
2022-11-17 00:00:00
Modified
None
Id
ad4284da-880f-44b8-ab0b-e25f02c0d62f
Tags
attack.execution
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022