Detection rules › By event

Application-Error

Event	Rules
Event ID 1000	6

Event ID 1000

6 detection rules reference this event. View event page.

Sigma (5)

CVE-2023-40477 Potential Exploitation - WinRAR Application Crash severity medium
CVE-2024-49113 Exploitation Attempt - LDAP Nightmare severity high T1499
LSASS Crash Via Netlogon Stack Buffer Overflow - CVE-2026-41089 severity high T1499
LSASS Process Crashed - Application severity high T1003, T1003.001
Microsoft Malware Protection Engine Crash severity high T1211, T1685

Splunk (1)

Potential CVE-2024-49113 - LDAPNightmare (Windows Event Log) T1499