All Detections

Bitvise SSH Client Execution

avatar
Kaung Khant Ko@kaungkhantko
updated May 24, 202630209

Detects the execution of the Bitvise SSH client, which OilRig uses for SSH tunneling and persistent access.

Microsoft Sentinel (KQL)