Ruckus wireless router n-day exploitation attempts (CVE-2020-22653, CVE-2020-22658, CVE-2023-25717)
Detects network logs identifying exploitation attempts or vulnerability scans targeting known Ruckus Wireless vulnerabilities (CVE-2020-22653, CVE-2020-22658, CVE-2023-25717). The rule parses CommonSecurityLog entries where the device, message, or activity fields contain references to these specific vulnerabilities.
Microsoft Sentinel (KQL)

