This message was deleted.

Can you maybe share the citrix IOC script that validates if a netscaler is compromised? Why does citrix it not simply share it and forces everyone to open a support ticket to get it?

because not all comprimises are the same, and they're having to make adjustments to the script as they encounter new indicators