Zeek
Detecting Zerologon (CVE-2020-1472) with Zeek
To assist in detecting Zerologon (CVE-2020-1472), we’ve open sourced a Zeek package that detects both attempted and successful exploits.
Featured
Uncovering the eMudhra incident: A Zeek detection
Use our Zeek package to detect the affected eMudhra certificates, since devices that don’t automatically get updates remain vulnerable.