IOC tool on NS console service has been updated an...
# citrix-netscaler
e
IOC tool on NS console service has been updated and refined. It also now supports Linux on AHV.
👍 2
b
Is there a place to get it outside of the console service?
n
The support engineer assigned to our case attempted to provide it, but did not attach it to the email or case. Presumably that channel should work, which is how we received the V1 script morning of the 27th.
d
Just open a chat with Citrix support - I got the v3 of the IOC script in less than 5 minutes from them.
👍 2
n
Looks like our on-prem NS Console has downloaded an updated script dated 29 Sept, presumably that's the latest, and we didn't get the warning about BSD this time. I'm ASSuming it's the AHV compatible one but I don't see version details.
m
Thanks Eric! Can confirm my NetScaler instances are able to run the script now.
I can't figure out the right combo of prompts to get it to send me the script. https://worldofeuc.slack.com/archives/CKHRXATV2/p1790714425613299?thread_ts=1790713100.818449&cid=CKHRXATV2
b
Chatbot just told me it couldn't provide it
m
I ended up telling the chatbot I need additional assistance after the IOC Script prompt and a ticket was opened and I was sent to a human. they are working on getting the script to me.
n
Has anyone that's received the latest script file compared it to the original one to see if additional IOCs were detected or is it just accounting for Linux builds now?
m
Release notes of v3 script say "Enhanced to avoid Known false positives. Added Linux support, IP address IOCs & Malicious file hash check."
👍 2