Electron Run As Node Execution
Detects IDEs executing as a Node.js interpreter, a technique used to run malicious JS silently, as described in the UNK_DeadDrop campaign.
Microsoft Sentinel (KQL)
Detects IDEs executing as a Node.js interpreter, a technique used to run malicious JS silently, as described in the UNK_DeadDrop campaign.
Already have an account?