Operation XENOFISCAL - Zuirt.hta Drop Followed by Mshta Execution
Correlates the file creation of zuidrt.hta and its execution via mshta.exe, indicating potential malicious activity associated with Operation XENOFISCAL.
Microsoft Sentinel (KQL)
Correlates the file creation of zuidrt.hta and its execution via mshta.exe, indicating potential malicious activity associated with Operation XENOFISCAL.
Already have an account?