Node.js hosts affected by CVE-2026-111497 (Node2Shell) inventory hunt
Detects Node.js builds, Express, and body-parser libraries vulnerable to CVE-2026-111497 (Node2Shell) via Microsoft Defender vulnerability inventory, process telemetry, and software inventory.
Microsoft Sentinel (KQL)

