Zeek
Detecting OpenBSD CVE-2019-19521 SSH exploit attempts
Here's a simple prototype script which identifies CVE-2019-19521 within SSH connections.
Featured
Uncovering the eMudhra incident: A Zeek detection
Use our Zeek package to detect the affected eMudhra certificates, since devices that don’t automatically get updates remain vulnerable.