Netskope Threat Labs

OS-WINDOWS Windows CSRSS privilege escalation attempt

IPS-CFW

3 SIDs: 49695, 200046, 200049

Detects an attempt to exploit CVE-2019-0735, a privilege escalation flaw that can grant higher access in Windows CSRSS.