SandboxEscaper Readfile Vulnerability + Detection via Splunk скачать в хорошем качестве

SandboxEscaper Readfile Vulnerability + Detection via Splunk

Demo of the SandboxEscaper readfile vuln. I used a VM in Virtualbox running a super out-of-date Win10 install, 4 vCPUs, and 2GB RAM. I also installed Splunk Enterprise utilizing the free license. Lastly, I disabled the NIC prior to running the binary just in case ;) Readfile 0day description (original blog post has been taken down): https://www.bleepingcomputer.com/news... Readfile.rar repo: https://github.com/SandboxEscaper/ran... Configure Splunk to grab local logs (Use Splunk Web to configure event log monitoring): https://docs.splunk.com/Documentation... I-SECURE blog on detection: https://www.i-secure.co.th/2018/12/de...