New Exploits Target SIEM and Network Traffic Management

• •Deadair enhances SIEM systems by verifying telemetry integrity.
• •StreamDivert allows for flexible network traffic redirection.
• •Both tools are available for immediate use in cybersecurity operations.

Two new cybersecurity tools have been released: deadair and StreamDivert. Deadair checks for missing telemetry in Security Information and Event Management (SIEM) systems, reporting on outdated data and delays. It supports Elastic Security, OpenSearch Security Analytics, and Microsoft Sentinel. StreamDivert is a man-in-the-middle tool that can redirect network connections, allowing for traffic manipulation across various protocols. Both tools are designed for use in cybersecurity operations, with deadair focusing on SIEM health and StreamDivert enabling traffic control. The release of these tools may impact organizations using the mentioned SIEM systems and those managing network traffic. Current status indicates both tools are available for download and use.