Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2022-21894

CVSS 4.4 8 detections found
View on NVD →
Secure Boot Security Feature Bypass Vulnerability

Detection rules

Source Rule Status Updated
splunk Windows Impair Defenses Disable HVCI production 2026-10-02
splunk Windows Registry BootExecute Modification production 2026-10-02
splunk Windows BootLoader Inventory experimental 2026-05-13
splunk Windows WinLogon with Public Network Connection production 2026-05-13
sigma Outbound Network Connection To Public IP Via Winlogon test 2024-03-12
sigma Windows Defender Real-Time Protection Failure/Restart stable 2023-05-05
sigma Windows Service Terminated With Error test 2023-04-14
sigma Important Windows Service Terminated With Error test 2023-04-14