
Archived
HAFNIUM-IOC
A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865
digital-forensicsforensicsincident-response+3

A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

Run on your ManageEngine server

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)

Scans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…