Zeek
Detecting OpenBSD CVE-2019-19521 SSH exploit attempts
Here's a simple prototype script which identifies CVE-2019-19521 within SSH connections.
Featured
Recognizing and detecting data exfiltration
See how to detect data exfiltration hiding in trusted protocols like DNS, SMB, and HTTP/S, and how Corelight catches it before it becomes a breach.