CVE-2026-46331 pedit COW Exploit Binary Execution (PACKET_EDIT_MEME)
Detects the execution of known exploit-related binaries or command lines, including references to specific exploit source files (e.g., 'pedit_cow_demo', 'packet_edit_meme'), CVE identifiers, or specific traffic control (tc) configurations potentially used in exploitation activities.
Microsoft Sentinel (KQL)
