How to Spot a Compromised MikroTik Router
MikroTikroutersecurityblue-teamnetworkcompromisedetectionconfigurationcybersecurity
The post describes a blue-team writeup focused on detecting compromised MikroTik routers by analyzing their configuration files. The writeup contains seven techniques, with each technique including a collection command, the artifact it produces, and a triage step. The author is requesting feedback on the content.