wsgidav

Reported Context (1)

When we are not using Responder and there is no present SMB server, but only a WebDAV server (simple wsgidav for testing), there are consistent and multiple rundll32.exe artifacts. CVE-2023-23397 Lets Malicious Outlook Invitations Trigger NTLM Hash Exposure

CVE (1)

People (6)

MITRE ATT&CK (4)

Vendors (1)

Products (3)

Tools (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.