
zeek-long-connections
Zeek package for tracking long connections to report them before they have completed.
anomaly-detectiondefensive-toolsincident-response+3
31

Zeek package for tracking long connections to report them before they have completed.

Python demo simulating CVE-2024-3094: a supply chain backdoor in XZ Utils with a trigger-based stealth activation.