topic Exception Exploit Module in Cortex XDR Discussions

Exception Exploit Module

brownchris — Fri, 18 Aug 2023 20:59:43 GMT

Hello Community,

I would like to create an exception rule for an IIS worker process w3wp.exe, which module would be the appropriate one where the exception would reside.

Based on the documentation here EXPLOIT SECURITY POLICY offers protection against this process, but in the exception configuration which module do I select when adding in the target properties?

Thanks for your assistance in advance.

Re: Exception Exploit Module

mavraham — Sun, 20 Aug 2023 07:44:54 GMT

Hi @brownchris, thank you for writing to Live Community.

If you cannot find a suitable module, you can always use the 'Generic' option.

Please let me know if this helped,

Mor

Re: Exception Exploit Module

brownchris — Mon, 21 Aug 2023 19:45:06 GMT

Do you have any documentation to share about the generic module and what it covers please?