Use this tool to find and remove specific prevalent threats and reverse the changes they have made (see covered malware families). Specifically, this update directs federal departments and agencies to run newly developed tools -Microsoft’s Test-ProxyLogon.ps1 script and Safety Scanner MSERT-to investigate whether their Microsoft Exchange Servers have been compromised. Microsoft releases the MSRT on a monthly cadence as part of Windows Update or as a standalone tool. Specifically, the updated Microsoft Safety Scanner (MSERT) can detect Web shells used in recent Exchange Server attacks by the Hafnium group. CISA has issued supplemental direction to Emergency Directive (ED) 21-02: Mitigate Microsoft Exchange On-Premises Product Vulnerabilities providing additional forensic triage and server hardening, requirements for federal agencies. The Microsoft Safety Scanner is a free downloadable security tool that provides on-demand scanning and helps remove viruses, spyware, and other malicious software. This allows the tool to be run to detect and remediate the latest Exchange Server-related threats.
0 kommentar(er)
