Researcher Chaotic Eclipse published FalconFlank, a PoC for local privilege escalation in CrowdStrike Falcon Sensor. It abuses the remediation mechanism for malicious Office macros to escalate privileges locally. This matters because a flaw in a trusted EDR can undermine endpoint security assumptions. #CrowdStrike #FalconFlank #PrivilegeEscalation
https://cyberworldops.eu/en/falconflank-poc-released-for-privilege-escalation-in-crowdstrike
