Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
22 detections
Filters
Last updated
All Time
Detection languages
22
Contributors
16
4
2
Categories
18
10
8
4
4
Platforms
15
5
3
3
2
Products / Services
7
6
4
2
1
MITRE Techniques
10
6
5
5
5
CVEs
71
71
64
58
49
20
Detects anomalous outbound network connections originating from the Python/vLLM process to irregular ports or cloud metadata IPs. This behavior may indicate command-and-control establishment, secondary staging, or cloud metadata pivoting following a successful CVE-2026-22778 exploit.
Page 2 of 2