Zeek
Detecting Zerologon (CVE-2020-1472) with Zeek
To assist in detecting Zerologon (CVE-2020-1472), we’ve open sourced a Zeek package that detects both attempted and successful exploits.
Featured
Ten Black Hat NOCs and counting: Corelight sees it all
After ten Black Hat NOCs, see what network traffic reveals: cleartext passwords, a leaked API key, and infected devices nobody noticed.