CVE-2026-88772 - SLAPSHOT Webshell Backdoors on Citrix NetScaler ADC and NetScaler Gateway
Detects SLAPSHOT Python proxy daemon and tunneling tool deployed alongside WHIPSHOT on compromised NetScaler appliances
Microsoft Sentinel (KQL)

Detects SLAPSHOT Python proxy daemon and tunneling tool deployed alongside WHIPSHOT on compromised NetScaler appliances

Already have an account?