Potential CVE-2023-23397 Exploitation Attempt - SMB — Detection Rule

Detects (failed) outbound connection attempts to internet facing SMB servers. This could be a sign of potential exploitation attempts of CVE-2023-23397.

Read the full analysis on IntelFusions