New Self-Signed Certificate Installed on C2 Server
Detects newly issued self-signed certificates on suspicious domains used for C2
Microsoft Sentinel (KQL)

Detects newly issued self-signed certificates on suspicious domains used for C2

Already have an account?