Adobe Acrobat DC Menu-Invoked JavaScript Enabled

Rule Info

Name
Adobe Acrobat DC Menu-Invoked JavaScript Enabled
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects registry changes to Adobe's Acrobat JavaScript configuration. Setting the "bEnableMenuItems" value to "Enabled" will enables the execution of JS by clicking menu items.
Reference
https://helpx.adobe.com/acrobat/using/javascripts-pdfs-security-risk.html
Date
2024-08-06 00:00:00
Modified
None
Id
b1c28304-dafd-4237-8810-cc3e6689eee8
Tags
attack.defense-evasion
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022