Detection rules › By catalog entry

Application-Error

Catalog entry	Rules
Event ID 1000	6

Event ID 1000

6 detection rules reference this catalog entry. View catalog entry.

Sigma (5)

CVE-2023-40477 Potential Exploitation - WinRAR Application Crash severity medium
CVE-2024-49113 Exploitation Attempt - LDAP Nightmare severity high T1499
LSASS Crash Via Netlogon Stack Buffer Overflow - CVE-2026-41089 severity high T1499
LSASS Process Crashed - Application severity high T1003,T1003.001
Microsoft Malware Protection Engine Crash severity high T1211,T1685

Splunk (1)

Potential CVE-2024-49113 - LDAPNightmare (Windows Event Log) T1499

Back to all Application-Error catalog entries