
HAFNIUM-IOC
A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

Public IoCs about log4j CVE-2021-44228

Curated collection of public Indicators of Compromise (IoCs) for the Log4j vulnerability (CVE-2021-44228), aggregated from multiple sources for…

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

A collection of IOCs for CVE-2021-44228 also known as Log4Shell

Searchable page for CISA Log4j (CVE-2021-44228) Affected Vendor & Software List

Log4Shell(CVE-2021-45046) Sandbox Signature

👮 Security advisories of Nextcloud

This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.

CVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441

This repo contains IoCs which are associated with exploitation of CVE-2021-4428.

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

OpenIOC rules to facilitate hunting for indicators of compromise

Zeek package detecting CVE-2021-42292 Microsoft Excel local privilege escalation exploit via network traffic analysis of spreadsheet downloads.

A plugin for DataSurgeon that Extracts CVE Numbers From Text (e.g: CVE-2021-56789)

Detection rules (Suricata + Zeek) for CVE-2021-31166 HTTP Protocol Stack vulnerability, providing network-level alerts on exploit attempts against…