Description
Detects the exploitation of CVE-2018-19320, flaws in the GIGABYTE kernel drivers that let any process read and write kernel memory. Cyberattackers widely abuse these vulnerable drivers to gain system-level privileges on Windows hosts.
FILE-OTHER GIGABYTE GPCIDrv and GDrv driver privilege escalation attempt
IPS-SWG
1 SID: 60814