LetsDefend Monitoring Alert
PowerShell Found in Requested URL
Sep, 30, 2022, 07:19 AM
Event ID: 125
Event Time: Sep, 30, 2022, 07:19 AM
Rule Name: SOC175 - PowerShell Found in Requested URL - Possible CVE-2022-41082 Exploitation
Alert Type: Web Attack
MITRE Technique:
T1190 - Initial Access - Exploit Public-Facing Application,
Real World Example:⭐ This zero-day vulnerability (CVE-2022-41082) is being actively exploited in the wild.
Severity: High
Security Analyst