Every now and then, you come across a situation where you need to get hands-on to understand how an exploit or malware works and then create a detection rule. Plus, there are times when it’s essential for the attacking machine to be on the local network to capture network traffic or utilize its own detection tools. <\/p>\n\n\n\n
In this article, we’ll show you how to set up a working environment to gather IOCs and write detection rules, using CVE-2024-21413<\/strong><\/a> <\/strong>as an example. We’ll walk you through integrating the ANY.RUN virtual machine into a local VPN network for this purpose. To do this, we’ll: <\/p>\n\n\n\n\n
\n
\n
\n