
CVE-2024-3400-Compromise-Checker
A simple bash script to check for evidence of compromise related to CVE-2024-3400

A simple bash script to check for evidence of compromise related to CVE-2024-3400

My Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.

Scans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771

CarbonBlack hunting queries to detect PrintNightmare (CVE-2021-1675) exploitation via file, module load, and process events, based on Sigma rules.

Curated indicators of compromise (IOCs) for CVE-2019-19781, including IP addresses and whois data from honeypot logs to aid threat detection and…

CVE-2022-28672 Vulnerabilidad Foxit PDF Reader - UaF - RCE - JIT Spraying

Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs,…

Hunting CVE-2018-13379

Detailed incident report and educational analysis of CVE-2022-41082 (ProxyNotShell) exploitation attempt on Microsoft Exchange Server, including…

Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign

Results of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar

Automatically generated C2 threat intelligence feeds of IPs, domains, URL paths, and implant configuration metadata, derived from internet scanning…

A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.