ZIRCONIUM (2d19c573-252b-49d8-8c2e-3b529b91e72d)
In addition to strengthening generic detection of EoP exploits, Microsoft security researchers are actively gathering threat intelligence and indicators attributable to ZIRCONIUM, the activity group using the CVE-2017-0005 exploit.