ChonkyChicken Recon Module: Correlated Port Scan + ARP Sweep/SMB Enumeration

Duo Tech@duotech

•updated Jul 24, 2026•0•0•6

Detects ChonkyChicken's recon module by correlating TCP port scanning with ARP sweep or SMB share enumeration from the same host.