AutoHotkey (AHK) Loader Execution (AsyncRAT)
Detects execution of specific AutoHotkey (AHK) scripts associated with AsyncRAT, where threat actors abuse AHK to reflectively inject .NET remote access trojans.
Microsoft Sentinel (KQL)
Detects execution of specific AutoHotkey (AHK) scripts associated with AsyncRAT, where threat actors abuse AHK to reflectively inject .NET remote access trojans.
Already have an account?