Suspicious Wildcard Certificate on Attack Domain
Detects wildcard TLS certificates on cheap TLDs commonly used for attack infrastructure
Microsoft Sentinel (KQL)

Detects wildcard TLS certificates on cheap TLDs commonly used for attack infrastructure

Already have an account?