[pawpatrules.fr] Veeam B&R CVE-2023-27532 RCE exploit POC : detection with Suricata IDS/NSM

In a report from GROUP-IP, published on July 2024, we can learn, CVE-2023-27532 vulnerabilty in Veeam Backup and Replication is actively exploited by Estate Rasomware threat actorin a report from GROUP-IP, we can learn CVE-2023-27532 vulnerabilty in Veeam Backup and Replication is actively exploited by Estate Ransomware threat actor.
www.group-ib.c...
www.veeam.com/...
www.horizon3.a...
PawPatrules offers a new rule for detecting .NET connection to Veeam Backup service seen in POCs available.
To download PAW Patrules rules collection for Suricata :
pawpatrules.fr/
SELKS solution is used in this video : www.stamus-net...
EveBox is used in this video : evebox.org/