Malicious systemd Service Creation (update-monitor)
Detects the creation of 'update-monitor.service' in the systemd directory, a known persistence mechanism for the Miasma toolkit.
Microsoft Sentinel (KQL)

Detects the creation of 'update-monitor.service' in the systemd directory, a known persistence mechanism for the Miasma toolkit.

Already have an account?