OS-WINDOWS -- Snort has detected traffic targeting vulnerabilities in a Windows-based operating system. This does not include browser traffic or other software on the OS, but attacks against the OS itself.
OS-WINDOWS Microsoft Windows DirectComposition elevation of privilege attempt
This rule looks for machine code that indicates the exploitation an elevation of privilege vulnerability in the DirectComposition Windows graphics component.
This rule files on download of a Windows executable file attempted to exploit an elevation of privilege vulnerability in the DirectComposition Windows graphics component.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
CVE-2020-0898 |
Loading description
|
Tactic: Privilege Escalation
Technique: Exploitation for Privilege Escalation
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org