
CVE-2022-26937
A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

Full exploit chain lab and Suricata IDS detection for CVE-2022-30190 (Follina) - MSDT RCE

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.

cve-2022-21907

Detects attempts and successful exploitation of CVE-2022-26809

An eBPF program to detect attacks on CVE-2022-0847

Zeek detection logic for CVE-2022-30216.

A Zeek CVE-2022-24491 detector.

Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL v 3.0.0 through v.3.0.6

A Zeek detector for CVE-2022-24497.

A Zeek package to detect CVE-2022-23270, a PPTP vulnerability in Windows.

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients