Nicholas Yovanovich

@nicholas303030

0 followers5 downloads49 copies0 likes129 views

1 detection

Filters

Last updated

All Time

Detection languages

Microsoft Sentinel (KQL)1

Platforms

Linux1

macOS1

Windows1

MITRE Techniques

T1190 - Exploit Public-Facing Application1

TA0001 - Initial Access1

CVEs

CVE-2026-1096181

CVE-2026-1096191

IDS Classtypes

Web Application Attack1

PHP2Shell Detection Query

KQL

Identifies devices running PHP versions affected by CVE-2026-109618 or CVE-2026-109619. The detection returns affected hosts, operating system platform, installed PHP version, and associated IPv4 addresses to support vulnerability assessment and remediation.

Nicholas Yovanovich@nicholas303030

Detections.ai Community

16 hours ago

490129