Yara Rule - 인증 바이 패스를 허용하는 Connectwise ScreenConnect (23.9.8 이전의 버전) 취약점과 관련하여 HuntressLabs에 의해 관찰 된 사후 악용 표시기를 감지
Yara 정의.
Yara Rule - Detects post exploitation indicators observed by HuntressLabs in relation to the ConnectWise ScreenConnect (versions prior to 23.9.8) vulnerability that allows an Authentication Bypass
Yara definition.
Author: Florian Roth
https://www.huntress.com/blog/slashandgrab-screen-connect-post-exploitation-in-the-wild-cve-2024-1709-cve-2024-1708
date = "2024-02-23"```
[https://github.com/Neo23x0/signature-base/commit/86c10545790afe363d96e832f99f99d683edd8b6](https://github.com/Neo23x0/signature-base/commit/86c10545790afe363d96e832f99f99d683edd8b6)