AttackDetection

AttackDetection copied to clipboard

Lovely work!

xkpx64

CVE-2020-3952 proposal

1

Hi, You can find an attempt to match exploitation of the vmware vmdir CVE-2020-3952 by checking for ldap modify operation on Administrators built-in group here https://github.com/gelim/CVE-2020-3952/blob/master/vmware.rules That may require some...

gelim

Hi! I invented a rule aimed to detect LDAP deletion request (`delRequest`) of `nTDSDSA` object. According [UncoverDCShadow](https://github.com/AlsidOfficial/UncoverDCShadow/) this is a reliable attribute of DCShadow attack. The rule was successfully tested...

spacepatcher

what is the pwassword to zip files

2

johnarakas

How to launch?

1

I Downloaded and pcap file? How to launch pcap file.

GrowtopiaJe