Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

7 detections

This rule detects IDS/IPS or vulnerability management alerts triggered by exploitation attempts targeting the Cisco IOS XR control plane, specifically related to CVE-2026-20212.
avatar
Arnold Chan@slaz
avatar
Hunters
1 month ago
004
This rule detects IDS/IPS or vulnerability management alerts triggered by exploitation attempts targeting the Cisco IOS XR control plane, specifically related to CVE-2026-20212.
avatar
Arnold Chan@slaz
Defender - KQL
2 months ago
0010
This rule detects IDS/IPS or vulnerability management alerts triggered by exploitation attempts targeting the Cisco IOS XR control plane, specifically related to CVE-2026-20212.
avatar
Arnold Chan@slaz
Defender - KQL
2 months ago
0010
This rule detects IDS/IPS or vulnerability management alerts triggered by exploitation attempts targeting the Cisco IOS XR control plane, specifically related to CVE-2026-20212.
avatar
Arnold Chan@slaz
avatar
Midnight Slayer
1 month ago
003
This rule detects IDS/IPS or vulnerability management alerts triggered by exploitation attempts targeting the Cisco IOS XR control plane, specifically related to CVE-2026-20212.
avatar
Arnold Chan@slaz
avatar
Detection & Hunting Community
2 months ago
003
This rule detects IDS/IPS or vulnerability management alerts triggered by exploitation attempts targeting the Cisco IOS XR control plane, specifically related to CVE-2026-20212.
avatar
Arnold Chan@slaz
avatar
Detections.ai Community
2 months ago
203
This rule detects unauthenticated TCP connection attempts targeting ports 43210 and 43211, which are associated with the Nexus 9000 S1HAL service. These attempts are indicative of potential exploitation activity related to CVE-2026-20212.
avatar
Arnold Chan@slaz
avatar
Detections.ai Community
2 months ago
002