CVE (Common Vulnerabilities and Exposures) is a publicly disclosed list of known cybersecurity vulnerabilities. Each CVE entry provides a unique identifier to make it easier for security professionals to discuss and address specific vulnerabilities.
| Incident Name: | EventID: 313 - [SOC335 - CVE-2024-49138 Exploitation Detected] |
|---|---|
| Description: | EventID: 313 |
| Incident Type: | Privilege Escalation |
| Created Date: | Dec, 11, 2025, 10:05 PM |
svchost.exe (Service Host) is a core Windows system process that hosts multiple services. It's often targeted by attackers who disguise malicious executables with similar names (e.g., svohost.exe) to avoid detection.
Alert Details: