Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects CVE-2026-33824 IKE VPN endpoint exploitation traffic (UDP 500/4500) correlated within a 5-minute window with a subsequent outbound reverse-shell callback from the same host.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
1010