Any Security Analytics or NWE coverage for SMB exploits from the Friday Shadowbrokers cache

[TimTsang]

Was wondering if there’s anything we can help in identifying either the latest shadowbrokers SMB exploit attempts or the tools it used?

[TwinkleLath · Accepted solution]

Yes Tim, check below links:

https://community.rsa.com/community/products/netwitness/blog/2017/05/15/blocking-wannacry-with-netwitness-endpoint 

https://community.rsa.com/community/products/netwitness/blog/2017/05/14/wannacry-from-the-rsa-netwitness-suites-perspective