libssh2 CVE-2026-55200 pre-exploit binary recon: ldd/objdump/strings targeting SSH libs
Detects rapid enumeration of system binaries related to SSH and networking libraries (libssh2, libcurl, libgit) or version checks within a 5-minute window, which may indicate reconnaissance or pre-exploitation activity related to vulnerabilities like CVE-2026-55200.
Splunk (SPL)

