
amavis
amavis is a high-performance email content filter framework written in Perl.
anomaly-detectiondefensive-toolsemail-security+2

amavis is a high-performance email content filter framework written in Perl.

Collection of KQL queries

Detects NTLM relay attacks via PetitPotam exploit using Zeek, distinguishing successful and unsuccessful attempts by analyzing DCERPC return codes.