Detect Naabu Port Scanner Activity

nomit vyas@xoxo

•updated Jun 23, 2026•1•0•4

This detection identifies potential usage of the Naabu port scanner by searching for its process execution or its specific network user-agent string. Naabu is a fast port scanner that can be used for network reconnaissance. This search leverages the Endpoint and Web CIM data models.