Zeek
Finding CVE-2022-22954 with Zeek
In this post, we share simple ways to detect evidence of CVE-2022-22954 in Zeek logs, which can be adapted to other data stores (e.g., a SIEM).
Featured
CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System
Corelight Labs found CVE-2026-70111 while fuzzing DFS APIs: A one-packet kernel crash that kills any affected Windows Server immediately.