Corelight Bright Ideas Blog

Network Monitoring

Detecting CVE-2022-30216: Windows Server Service Tampering

By Corelight Labs Team – August 9, 2022

In July 2022, Microsoft disclosed a vulnerability in the Windows Server Service that allows an authenticated user to remotely access a local API call on a domain controller, which triggers an NTLM request. This results in a leak of credentials that... Read more »

Finding CVE-2022-22954 with Zeek

By Corelight Labs Team – May 20, 2022

CISA released a warning to federal agencies on May 18 that APT actors are actively exploiting recent vulnerabilities found in VMware, including CVE-2022-22954. Your first thought may have been to want new signatures, indicators, and/or behavioral... Read more »

Corelight Bright Ideas Blog

Network Monitoring

Detecting CVE-2022-30216: Windows Server Service Tampering

Finding CVE-2022-22954 with Zeek

Recent Posts

Sign up for our newsletter

Locations

1 (888) 547-9497

We're hiring!