Lucene search
+L

76 matches found

Kitploit
Kitploit
added 2026/09/03 1:52 p.m.6 views

CorelightForSecOps

Recopilar registros del Sensor de Corelight Este documento describe cómo puede recopilar registros del Sensor de Corelight mediante la configuración del Sensor de Corelight y un forwarder de Chronicle. Este documento también enumera los tipos de registro admitidos y las versiones de Corelight...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 8:38 a.m.7 views

DFIR-O365RC

目录 1. 模块描述 2. 安装和先决条件 1. 使用 Docker 2. 手动安装 3. 管理 DFIR-O365RC 应用程序 1. 创建应用程序 2. 更新应用程序 3. 移除应用程序 4. 权限和许可证要求 5. 模块包含的函数 6. 生成的文件 DFIR-O365RC 在 SSTIC 2021(信息技术与通信安全研讨会)上进行了展示。演示文稿的幻灯片和录制视频(法文)可在此处获取:链接。 ⚠️ 2024年3月31日,Microsoft 弃用了 我们用于 DFIR-O365RC 的身份验证方法。因此,我们于2024年8月发布了 2.0.0 版本,其中包含关于身份验证的重大变更...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 8:05 a.m.5 views

grove

Grove 是一个软件即服务(SaaS)日志收集框架,旨在支持从本身不支持日志流式传输的服务中收集日志。 Grove 使团队能够以可靠且一致的方式从其供应商处收集安全相关事件。然后,这些数据可以使用团队现有的工具进行存储和分析,以支持威胁检测和合规计划。 开箱即用,Grove 提供: 🪵 可靠且周期性的日志收集。 ☁️ 支持大量广泛使用的 SaaS 应用程序和服务。 🧱 基于插件的“连接器”,以支持新的应用程序和服务。 🧳 “自带”缓存、输出、配置和机密后端。 Grove 由 HashiCorp 安全团队创建并持续维护。 请注意 :虽然这不是一个官方的 HashiCorp...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 2:01 a.m.4 views

DShield-SIEM

DShield Sensor Log Collection with Elasticsearch Introducción Este es un fork y una actualización significativa de la publicación inicial en el sitio web de ISC Storm Center por Scott Jensen como un documento BACS y los scripts publicados en Github. https://github.com/fkadriver/Dshield-ELK...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 4:16 a.m.6 views

HTSOC

HTSOC — Sistema SOC integrado para monitoreo, detección e investigación de eventos HTSOC es un sistema de Security Operations Center construido por uno mismo en un entorno de laboratorio. El sistema combina recopilación de logs, detección con Splunk, gestión de alertas/casos con TheHive, análisis...

9.8CVSS6.9AI score0.99987EPSS
SaveExploits68References3
Kitploit
Kitploit
added 2026/08/28 3:21 a.m.2 views

Phant0m

Phant0m | Killer dei Log degli Eventi di Windows Svchost è essenziale nell'implementazione dei cosiddetti processi di servizio condivisi, in cui un numero di servizi può condividere un processo al fine di ridurre il consumo di risorse. Raggruppare più servizi in un unico processo conserva risorse...

5.9AI score
SaveExploits0References3
EUVD
EUVD
added 2026/08/05 4:31 p.m.15 views

EUVD-2026-53474

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

5.7CVSS5.5AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/16 12:00 a.m.30 views

PT-2026-60460

Name of the Vulnerable Software and Affected Versions ubuntu-pro-client affected versions not specified Description An insecure symlink following issue exists within the pro collect-logs command framework. The utility uses predictable temporary file paths or user-accessible log directories to...

5CVSS6AI score0.00206EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/11 2:16 p.m.22 views

CVE-2026-10847

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...

7.8CVSS0.00124EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/11 1:52 p.m.22 views

EUVD-2026-36247

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...

7.8CVSS6AI score0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/11 1:52 p.m.40 views

CVE-2026-10847 Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...

7.8CVSS0.00124EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/11 1:52 p.m.15 views

CVE-2026-10847 Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitatio...

7.8CVSS6AI score0.00124EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/11 1:52 p.m.65 views

CVE-2026-10847

CVE-2026-10847 is a local privilege escalation affecting Check Point Identity Agent Full for Windows OS. An authenticated local user may gain SYSTEM privileges by exploiting improper handling of executable resolution during log collection. The documented impact is elevated privileges on the affec...

7.8CVSS6AI score0.00124EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/11 12:00 a.m.39 views

PT-2026-48661

Name of the Vulnerable Software and Affected Versions Check Point Identity Agent Full for Windows OS affected versions not specified Description A local privilege escalation issue exists where an authenticated local user can execute arbitrary code with SYSTEM privileges. This occurs due to improp...

7.8CVSS5.7AI score0.00124EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2026/04/05 12:00 a.m.16 views

NetSecBed: A Container-Native Testbed for Reproducible Cybersecurity Experimentation

Cybersecurity research increasingly depends on reproducible evidence, such as traffic traces, logs, and labeled datasets, yet most public datasets remain static and offer limited support for controlled re-execution and traceability, especially in heterogeneous multi-protocol environments. This...

6AI score
SaveExploits0
Veeam
Veeam
added 2026/02/10 12:00 a.m.284 views

How to Change Where Logs are Stored on the Veeam Appliances

Changing Log Location Will Break Automated Log Collection The automated log collection tools built into both the Veeam Backup & Replication Web UI of the Veeam Software Appliance and the "Create support bundle" function within the Host Management Console collect logs only from the default log...

5.5AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:00 a.m.8 views

MiracleLinux 3 : sos-1.7-9.62.0.1.AXS3 (AXSA:2012-526:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-526:01 advisory. Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging...

4.3CVSS5.5AI score0.00994EPSS
SaveExploits0References2
Veeam
Veeam
added 2025/10/23 12:00 a.m.49 views

Release Information for Veeam Backup for Microsoft 365 8.2 and Cumulative Patches

More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Build Numbers and Versions of Veeam Backup for Microsoft 365 Requirements This release can be used to: update manually from a previous Veeam Backup for Microsoft 3...

5.7AI score
SaveExploits0Affected Software1
Veeam
Veeam
added 2025/10/17 12:00 a.m.35 views

How to Collect Logs from Veeam Appliance Installer

Purpose This article documents how to collect logs from the installer for the Software Appliances included with Veeam Backup & Replication 13 Veeam Software Appliance, Veeam Infrastructure Appliance, and Veeam Hardened Repository Appliance. This procedure may be required if an installation-relate...

6AI score
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2015-8547

Malware in sbrugna...

6.5CVSS6.6AI score0.00619EPSS
SaveExploits0References2
Rows per page
Query Builder