Microsoft Error Report Monitoring
ISS RealSecure recently rolled out a new detection capability- capturing reports to Microsoft regarding crashed applications.
Many analysts may not know what to do with these reports. I scour them looking for unusual or unauthorized applications that have crashed, which would alert me to weaknesses or malware on networked hosts.
What crashes most often? By far, the most applications that crash goes in this order:
- Word
- Outlook
- Excel
- Internet Explorer
- Acrobat Reader
This does not mean that these applications are the most buggy. Most likely it means that they are the most used.