Zeek
Detecting CVE-2022-23270 in PPTP
In this post Corelight Labs reviewed a proof of concept exploit for this vulnerability and wrote a Zeek-based detection for it.
Featured
Uncovering the eMudhra incident: A Zeek detection
Use our Zeek package to detect the affected eMudhra certificates, since devices that don’t automatically get updates remain vulnerable.