More references

From 
Crowdstrike
MSRC
and kql hunting query from James Quinn
This commit is contained in:
Rony 2021-03-06 13:28:14 +05:30 committed by GitHub
parent eaab88ef28
commit 7b242555df
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -8459,7 +8459,10 @@
"https://us-cert.cisa.gov/ncas/alerts/aa21-062a", "https://us-cert.cisa.gov/ncas/alerts/aa21-062a",
"https://discuss.elastic.co/t/detection-and-response-for-hafnium-activity/266289", "https://discuss.elastic.co/t/detection-and-response-for-hafnium-activity/266289",
"https://github.com/microsoft/CSS-Exchange/tree/main/Security", "https://github.com/microsoft/CSS-Exchange/tree/main/Security",
"https://github.com/cert-lv/exchange_webshell_detection" "https://github.com/cert-lv/exchange_webshell_detection",
"https://www.crowdstrike.com/blog/falcon-complete-stops-microsoft-exchange-server-zero-day-exploits",
"https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021",
"https://pastebin.com/J4L3r2RS"
] ]
}, },
"uuid": "4f05d6c1-3fc1-4567-91cd-dd4637cc38b5", "uuid": "4f05d6c1-3fc1-4567-91cd-dd4637cc38b5",