NetScaler CitrixBleed 2 Exploitation Detection
This detection identifies potential exploitation attempts against Citrix NetScaler appliances vulnerable to CVE-2025-5777 (CitrixBleed 2), focusing on suspicious POST requests and memory spillage in logoff entries.
Microsoft Sentinel (KQL)

