
zerologon
Zeek package to detect Zerologon
defensive-toolsintrusion-detectionnetwork-security+2

Zeek package to detect Zerologon

Protect your domain controllers against Zerologon (CVE-2020-1472).

Detects CVE-2020-16898: "Bad Neighbor"

Workaround for CVE-2020-10663 (vulnerability in json gem)

This script will remediate the BootHole bug identified in CVE-2020-25632 and/or CVE-2021-20233.