
dfir-malware-investigation
Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.



Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group

cve-2022-21907

Detects attempts and successful exploitation of CVE-2022-26809

Public repo for anything CVE-2022-21894

Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign

Run on your ManageEngine server

Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL v 3.0.0 through v.3.0.6

Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)

Microsoft Sentinel analytic rule and hunting queries in ASIM for activity of MSDT and CVE-2022-30190.

Information and scripts for the confluence CVE-2022-26134