Query
CVE-2025-53770 - SharePoint ToolShell
LogScale · Detection & Monitoring · v1 · @sebastian · 25.7.2026
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Queries/CVE-2025-53770 - SharePoint ToolShell.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Helpful-CQL-Queries/CVE-2025-53770%20-%20SharePoint%20ToolShell.md
DetectionEndpointWindows
Query contentv1
Download v1Loading editor…
Version history
Every save keeps the previous content. Open any version to view or download it.