Malicious X-Antibot-Token Header Activity
Detects web requests containing the custom X-Antibot-Token header utilized by EvilToken proxies, indicating potential malicious activity related to AI-enabled device code phishing campaigns.
Microsoft Sentinel (KQL)

