Hunting for Bugs in Windows Mini-Filter Drivers
Tags
attack-pattern: Data Direct Model Exploits - T1587.004 Exploits - T1588.005 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID ff3a844d-0d40-4560-abca-e69efc30b8df
Fingerprint 8799905d6de39844
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 14, 2021, 9:04 a.m.
Added to db Jan. 18, 2023, 9:45 p.m.
Last updated Nov. 12, 2024, 11:53 a.m.
Headline Project Zero
Title Hunting for Bugs in Windows Mini-Filter Drivers
Detected Hints/Tags/Attributes 68/1/17
Source URLs
Redirection Url
Details Source https://googleprojectzero.blogspot.com/2021/01/hunting-for-bugs-in-windows-mini-filter.html
URL Provider
Details Provider Source level domain
Details blogspot.com googleprojectzero.blogspot.com
Attributes
Details Type #Events CTI Value
Details CVE 1 
cve-2020-17103
Details CVE 1 
cve-2020-17134
Details CVE 1 
cve-2020-17136
Details CVE 1 
cve-2020-17139
Details CVE 3 
cve-2018-0877
Details CVE 3 
cve-2019-0836
Details Domain 1 
ports.name
Details File 1 
filename.max
Details File 16 
iostatus.inf
Details File 12 
c:\windows\notepad.exe
Details File 380 
notepad.exe
Details File 1 
d:\abc.txt
Details File 1 
buffered.sys
Details File 3 
eicar.txt
Details File 9 
license.rtf
Details File 2 
c:\windows\system32\license.rtf
Details File 1 
c:\users\admin\appdata\local\virtualstore\windows\system32\license.rtf