Tag
medium
advisory
Detect Large ICMP Traffic
2 rules 1 TTPThis analytic identifies ICMP traffic to external IP addresses with total bytes greater than 1,000 bytes, leveraging the Network_Traffic data model to detect potential information smuggling, covert communication, or command-and-control (C2) activities.
Palo Alto Network Traffic +4
network
command-and-control
icmp
2r
1t
medium
advisory
CVE-2026-23398 ICMP NULL Pointer Dereference
2 rules 1 TTP 1 CVECVE-2026-23398 is a vulnerability related to a NULL pointer dereference in the ICMP protocol, potentially leading to a denial-of-service condition in affected Microsoft products.
icmp
denial-of-service
vulnerability
cve
2r
1t
1c