Multi-Stage C2 Channel Switch Detected
Detects C2 infrastructure switching to second-stage servers after initial beacon
Microsoft Sentinel (KQL)

Detects C2 infrastructure switching to second-stage servers after initial beacon

Already have an account?