
Archived
c2finder
Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
intrusion-detectionioc-managementlog-analysis+3

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

A repo to hold KQL queries as part of my 100 days of KQL effort.

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)