ZeekWeek 2022 - Lightning Talk on Using Zeek to Detect Data Exfiltration over ICMP - Rakesh Passa
Rakesh Passa talks about using Zeek to detect data exfiltration over ICMP. His script measures odd activities like unmatched echo reply payloads and differing payload contents between echo reply pairs. Visit https://github.com/Sithari/icmp-exfil... for more details.