41 matches found
FalconEye
FalconEye: Software de detección en tiempo real para inyecciones de procesos en Windows FalconEye es un software de detección para endpoints Windows para inyecciones de procesos en tiempo real. Es un controlador en modo kernel que tiene como objetivo detectar inyecciones de procesos a medida que...
Meerkat
Meerkat Meerkat 是一个 PowerShell 模块集合，专为基于 Windows 的端点进行工件收集和侦察而设计，无需预部署代理。用例包括事件响应分类、威胁狩猎、基线监控、快照比较等。 工件 主机信息| 网络适配器| 进程| 服务| 文件 ---|---|---|---|--- 审核策略| Windows 防火墙规则| DLL| 本地用户| 备用数据流 ADS 磁盘| 端口| 字符串| 本地组| 回收站 修补程序| ARP| 句柄| 计划任务| Hosts 文件 TPM| DNS| 环境变量| 自动运行| 证书 软件| 网络路由| 会话| BitLocker| 选择性注册...
sheepl
sheepl Sheepl: Creación de comportamiento de usuario realista para apoyar el desarrollo de tácticas de operaciones en entornos de laboratorio Introducción Hay muchos recursos disponibles en línea sobre cómo construir entornos de red de AD para el desarrollo de tácticas de operaciones de equipo az...
home_SOC_suite
Home SOC Suite — Night's Watch Un Centro de Operaciones de Seguridad SOC personal construido desde cero durante un programa de reentrenamiento en Anwendungsentwicklung. Esta suite monitorea un endpoint Windows en busca de anomalías de red, picos de recursos, ejecución de procesos, cambios en el...
CVE-2024-49138-SOC-Investigation
Investigación de Explotación de CVE-2024-49138 Plataforma: Entorno de Entrenamiento SOC de LetsDefend Alerta: SOC335 - Detección de Explotación de CVE-2024-49138 Categoría: Escalada de Privilegios | Análisis de Malware | Respuesta a Incidentes Estado: Investigación Completada ✅ Resumen En esta...
EUVD-2026-72921
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
MAL-2026-5790 Malicious code in ldpbootstrap-jquery (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcab02ae44d1604b6fa9e80156a8c5882f7a4809470ff59eb6d14db4bf28f91f ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The package contains...
CVE-2026-10847 Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...
CVE-2026-3991
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
EUVD-2026-17164
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
CVE-2026-3991
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
CVE-2026-3991 Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
CVE-2026-3991 Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
CVE-2026-3991
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
CVE-2026-3991
CVE-2026-3991 affects Symantec Data Loss Prevention Windows Endpoint prior to: 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15. The issue is described as an Elevation of Privilege , allowing a local attacker to obtain elevated access to protected resources. The provided doc...
CVE-2026-3991: Inclusion of Functionality from Untrusted Control Sphere
Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
Broadcom Symantec Data Loss Prevention Windows Endpoint 安全漏洞
Broadcom Symantec Data Loss Prevention Windows Endpoint is a terminal data leakage prevention security software developed by Broadcom Corporation. There is a security vulnerability in Broadcom Symantec Data Loss Prevention Windows Endpoint, which stems from an privilege escalation vulnerability...
PT-2026-29098
Name of the Vulnerable Software and Affected Versions Symantec Data Loss Prevention Windows Endpoint versions prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15. Description The software may be susceptible to an Elevation of Privilege issue, allowing an attacker to ga...
Broadcom Symantec Endpoint Protection Windows Agent security vulnerabilities
Broadcom Symantec Endpoint Protection Windows Agent is a client component of the endpoint security solution provided by Broadcom Corporation. There is a security vulnerability in Broadcom Symantec Endpoint Protection Windows Agent, which stems from a COM hijacking issue. This vulnerability could...