CVE-2023-28252-

CVE-2023-28252 exploit detection Monitoring of file creation in the directory where the exploit leaves files used for exploitation, at a hardcoded path in the folder "C:\Users\Public", "C:\Users\Public.container*", "C:\Users\Public\MyLog*.blf" and "C:\Users\Public\p_*".