AutoJack WebSocket Exploit Activity
Identifies network attempts to communicate with the vulnerable AutoGen Studio MCP WebSocket endpoint using the exploited server_params parameter, indicating potential exploitation of the AutoJack vulnerability.
Microsoft Sentinel (KQL)

