
CVE-2017-5638_struts
Bro/Zeek script for detecting Apache Struts CVE-2017-5638 reconnaissance, compromise, and malware download tracking with automated IP extraction.
exploitationintrusion-detectionmalware-analysis+3
8

Bro/Zeek script for detecting Apache Struts CVE-2017-5638 reconnaissance, compromise, and malware download tracking with automated IP extraction.

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

A process monitoring tool that tries to detect exploitation

TheLightScope

Blazing-Fast Token-Efficient Intrusion Detection System (IDS) based on TypeSafe's Jev.

Mapping Corelight or Zeek data to Elastic Common Schema logs

RPi3+ Network Cracker Setup Tool