SOC173 — Follina 0-Day Detected

SOC173 — Follina 0-Day Detected

Event ID: 123
Platform: LetsDefend

Alert

EventID : 123
Event Time : Jun, 02, 2022, 03:22 PM
Rule : SOC173 - Follina 0-Day Detected
Level : Security Analyst
Source Address : 172.16.17.39
Hostname : JonasPRD
File Name : 05-2022-0438.doc
File Hash : 52945af1def85b171870b31fa4782e52
File Size : 10.01 Kb
AV Action : Allowed
Alert Trigger Reason : msdt.exe executed after Office document
File (Password:infected) : Download

Based on the information provided in this alert, the …

blue team cybersecurity incident response lets-defend zero-day