Netskope Threat Labs

OS-WINDOWS Microsoft Windows Common Log File System escalation of privilege attempt

IPS-SWG

5 SIDs: 62855, 62857, 62859, 62891, 63420

Detects an attempt to exploit CVE-2024-20653, CVE-2023-28252, and CVE-2024-30025, a privilege escalation flaw that can grant higher access in Microsoft Windows Common Log File System.