Detection Script
For complete attack details, detection indicators, and mitigation strategies, see the Zerologon (Attack #17) section in the Five Eyes AD Attacks guide.
Zerologon Detection Script
Detect Zerologon CVE-2020-1472 exploitation attempts on Netlogon.