Carbon Black query for Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444)
zam Carbon Black query that can be use to detect if any MSHTML RCE happened (probably need to be refined more): Search if any assets making connections towards IOCs (known IOCs…