Quick Guide: Using New Search 2.0 to Identify SolarWinds Orion Infrastructure
ID: 54a2ff86-729f-5782-8899-69d5038b1e24
STIX ID: report--54a2ff86-729f-5782-8899-69d5038b1e24
Feed Name: Censys Blog
Threat Score
A concise Censys Search 2.0 guide showing translated queries to discover exposed SolarWinds Orion instances and certificates (including RDP certs with CN=SolarWinds-Orion) related to the SolarWinds supply-chain compromise; it compares results from the legacy Censys search and Search 2.0 and recommends following CISA guidance and sharing any suspected attacker infrastructure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.