All Detections

Fake Amazon Security Alert / HarborWatch RAT

avatar
Ankit Mehta@Secvyn
updated Jun 30, 2026000

Detects suspicious PowerShell execution chains (-nop, -w hidden, iex (gc) used in ClickFix RAT delivery.

Microsoft Sentinel (KQL)