Open source tools and scripts by Arctic Wolf:
- Arctic Wolf Log4Shell Deep Scan: detects Java application packages subject to CVE-2021-44228 and CVE-2021-45046
- Arctic Wolf Spring4Shell Deep Scan: detects Java application packages subject to CVE-2022-22965
Detection rules, IOCs, and artifacts published by Arctic Wolf Labs.
- CVE-2023-22527 Leading to C3RB3R Ransomware: YARA rules to detect activity seen during exploitation of Confluence Server via CVE-2023-22527
- Lorenz Ransomware: Chiseling In: YARA rules, Suricata rules, and IOCs associated with the Lorenz ransomware group
- Lorenz Ransomware: Getting Dumped: IOCs, artifacts, Sigma rules, and YARA rules related to unexpected use of Magnet RAM Capture by Lorenz ransomware actors
- WDAC Policy for Iranian App Abuse (2025): Windows Defender Application Control policy to block dual-use application abuse by Iranian threat groups