Product
Windows Sysmon
- First Reported
- Sep 3, 2026
- Latest Reported
- Sep 3, 2026
Reported Context (1)
- in standard endpoint telemetry, including CrowdStrike Falcon Data Replicator (FDR) data and Windows Sysmon logging. Detection does not depend on CrowdStrike confirming the flaw, and it holds up against the Detection Guidance for Reported CrowdStrike Falcon Local Privilege-Escalation PoC
People (1)
MITRE ATT&CK (2)
Vendors (2)
Products (3)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.