Vulnerable HTTP/3 stacks: Wireshark and mitmproxy without http3 disabled
Detects the presence of vulnerable Wireshark software versions susceptible to CVE-2025-13945 and detects mitmproxy instances running without HTTP/3 disabled via the --set http3=false command line argument.
Microsoft Sentinel (KQL)

