Zeek
Detecting CVE-2022-23270 in PPTP
In this post Corelight Labs reviewed a proof of concept exploit for this vulnerability and wrote a Zeek-based detection for it.
Featured
Stop Chasing Alerts, Start Hunting Adversaries: The New NDR Essentials
Richard Bejtlich introduces NDR Essentials, a guide to using high-fidelity network evidence for detection, response, and threat hunting.