Crimson Kingsnake – Malicious PDF Metadata Detection
Description- Detects PDF invoice files associated with Crimson Kingsnake using consistent metadata author “hpins”.
Microsoft Sentinel (KQL)

Description- Detects PDF invoice files associated with Crimson Kingsnake using consistent metadata author “hpins”.

Already have an account?