medium
advisory
Adobe Creative Cloud: Execution of scripts via bundled node.exe
The node.exe binary bundled with Adobe Creative Cloud can be used to execute scripts. A detection rule is available to identify instances where node.exe executes files located outside of the Adobe Creative Cloud Experience JavaScript directory.
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- Medium
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 10, 03:02 UTC
- Detection
- 1 rule
- Source quality
- A2Roughly even chance
Adobe Creative Cloud installations include a bundled node.exe binary. This binary can be used to execute scripts.
Detection
The following Sigma rule detects the execution of scripts by the Adobe Creative Cloud bundled node.exe when the script path is not located within the Adobe Creative Cloud Experience JavaScript resource directory.
Detection coverage 1
Node Process Executions
mediumsigma
sources: process_creation, windows
Detection queries are available on the platform. Get full rules →