Skip to content

CVE-2026-47301 - #4236

Open
RavenTait wants to merge 7 commits into
developfrom
sccm_cve_2026_47301
Open

CVE-2026-47301#4236
RavenTait wants to merge 7 commits into
developfrom
sccm_cve_2026_47301

Conversation

@RavenTait

Copy link
Copy Markdown
Contributor

Detections for coverage of CVE-2026-47301

Details

New Detections:
Windows Builtin Account Name Change
Windows Suspicious Child Process of smsexec
Windows Suspicious SCCM Adsource DLL

Updated Detections:
Windows CAB File on Disk

Detections for coverage of CVE-2026-47301

@onurmerdogan onurmerdogan left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a lot Raven, looks great, just a few suggestions from my side.

Comment thread detections/endpoint/windows_builtin_account_name_was_changed.yml
Comment thread detections/endpoint/windows_builtin_account_name_change.yml Outdated
Comment thread detections/endpoint/windows_builtin_account_name_was_changed.yml
Comment thread detections/endpoint/windows_builtin_account_name_was_changed.yml
Comment thread detections/endpoint/windows_builtin_account_name_was_changed.yml
Comment thread detections/endpoint/windows_suspicious_sccm_adsource_dll.yml Outdated
Comment thread detections/endpoint/windows_suspicious_child_process_of_smsexec.yml Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants