Use CISA's official AA23-213A advisory. Verify what each Ivanti vulnerability enables, the abused API path, the actors' log-deletion method, and the host and network evidence recommended for hunting.