Corelight Bright Ideas Blog

Yacin Nadji

Telegram Zeek, you’re my main notice

By Yacin Nadji – July 28, 2021

Notices in Zeek Zeek’s Notice Framework enables network operators to specify how potentially interesting network findings can be reported. This decoupling of detection and reporting highlights Zeek’s flexibility: a notice-worthy event in network A... Read more »

Detecting Zerologon (CVE-2020-1472) with Zeek

By Yacin Nadji – September 15, 2020

CVE-2020-1472 aka Zerologon, disclosed by Tom Tervoort of Secura, is an illustrative case study of how a small implementation mistake in cryptographic routines cascades into a privilege escalation vulnerability that allows an attacker to change the... Read more »

Corelight Bright Ideas Blog

Yacin Nadji

Telegram Zeek, you’re my main notice

Detecting Zerologon (CVE-2020-1472) with Zeek

Recent Posts

Sign up for our newsletter

Locations

1 (888) 547-9497

We're hiring!