All Detections

MuddyWater gp_v7_reflective.py Execution

avatar
Ibrahim Saud@tektrix
updated Jun 17, 2026005

Detects 'gp_v7_reflective.py', a Python reflective loader for GodPotato evasion, associated with the MuddyWater threat group.

Microsoft Sentinel (KQL)