Dropping Elephant RAT Mutex Detection
Detects the unique hardcoded mutex created by the Dropping Elephant in-memory RAT to prevent duplicate infections. This rule specifically looks for the mutex string 'kshdkfhskdfjkhsdkfhsjkdfhkj' during global object or mutex creation events.
Microsoft Sentinel (KQL)
