GammaLoad - Custom User-Agent Beacon Pattern (T1071.001)
Analyzes HTTP request headers to detect GammaLoad's unique User-Agent beacon containing the computer name and date format string.
Microsoft Sentinel (KQL)

Analyzes HTTP request headers to detect GammaLoad's unique User-Agent beacon containing the computer name and date format string.

Already have an account?