MuddyWater Node.js Spawning Command Prompt
Detects node.exe spawning cmd.exe. In Seedworm intrusions, Node.js acts as an anomalous loader to orchestrate subsequent commands instead of a human operator.
Microsoft Sentinel (KQL)
Detects node.exe spawning cmd.exe. In Seedworm intrusions, Node.js acts as an anomalous loader to orchestrate subsequent commands instead of a human operator.
Already have an account?