Skip to content
Threat Feed

Tag

Exchange-Server

1 brief RSS
high threat

Suspicious Processes Spawned by Microsoft Exchange Worker Process

Detects suspicious processes spawned by the Microsoft Exchange Server worker process (w3wp.exe), potentially indicating exploitation or web shell activity.

exploited Exchange Server initial-access webshell exchange-server windows
2r 2t