Backdoor.Turn Network Scanning
Detects network scanning activity originating from processes side-loaded with Backdoor.Turn, specifically looking for 'dbgview64.exe' initiating connections to a large number of unique remote IPs.
Microsoft Sentinel (KQL)

