Exploit
exploit:windows_event_log_editing_exploit
Also: Edit Event Log, Event Log Edit, Windows event log hack
Capability released by the Shadow Brokers to disable logging or remove individual Windows event records without the normal audit evidence.
Capability released by the Shadow Brokers to disable logging or remove individual Windows event records without the normal audit evidence.
“The exploit they dumped means a hacker can edit an event log in Windows.”
“you can disable logging without an event indicating logging has been turned off”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Microsoft Windows | Explicit | 53 |
| outgoing | AFFECTS | Windows event logs | Explicit | 53 |
Windows event log editing exploit AFFECTS Microsoft Windows
The dumped exploit is described as enabling attackers to edit Windows event logs.
Explicit Confidence 98% · Jack Rhysider EP 53 Details
“The exploit they dumped means a hacker can edit an event log in Windows”
Windows event log editing exploit AFFECTS Windows event logs
The exploit can disable logging without creating an event and remove individual Windows events.
Explicit Confidence 97% · Jack Rhysider EP 53 Details
“you can disable logging without an event indicating logging has been turned off”