Description
Detects the exploitation of CVE-2023-36005, a privilege escalation in the Windows Telephony API. The rule matches the serialized structures that public exploits use to run code with elevated privileges through the service.
FILE-EXECUTABLE Windows Telephony API escalation of privilege attempt
IPS-SWG
1 SID: 62765