GammaDrop - Cloudflare Quick Tunnel Artifact (T1090)

Ibrahim Saud@tektrix

•updated Jun 20, 2026•1•0•3

Detects connections to temporary Cloudflare quick tunnel endpoints initiated by VBS scripts.