Skip to main content

The Devo Exchange Team in collaboration with Devo’s SciSec Team have published a new Alert Pack as part of the coordinated response to the ProxyNotShell 0-Day Vulnerability in Microsoft Exchange.

This pack contains 3 Alerts hand crafted by the SciSec Team to check your environment for this dangerous exploit. These are

  • SecOpsProxyNotShellHashIoc
  • SecOpsProxyNotShell
  • SecOpsProxyNotShellIpIoc

Download this Alert Pack directly from Devo Exchange.

 

Learn more about This Alert pack in our docs!

 

Additional Resources
 

Devo SciSec Team Blog on ProxyNotShell.

MITRE ATT&CK Analysis on this type of attack

Be the first to reply!