Manage Engine Java Suspicious Sub Process

Rule Info

Name
Manage Engine Java Suspicious Sub Process
Description
Detects suspicious sub processes started by the Manage Engine ServiceDesk Plus Java web service process
Modified
2023-01-21 00:00:00
Date
2023-01-18 00:00:00
Author
Florian Roth (Nextron Systems)
Tags
DEMO
Id
cea2b7ea-792b-405f-95a1-b903ea06458f
Type
Community Rule

Rule History

Author
Commit
Title
Date
Nasreddine Bencherchali
chore: add nextron authors tag
2023-02-01
Nasreddine Bencherchali
fix: filter and add missing modified
2023-01-21
Nasreddine Bencherchali
fix: apply suggestions from code review
2023-01-21
Florian Roth
refactor: extended some exploitation rules - sub procs
2023-01-21
Nasreddine Bencherchali
fix: change link to permalink
2023-01-19
Florian Roth
docs: changed wording
2023-01-19
Florian Roth
rule: Manage Engine suspicious sub process
2023-01-19