Crimson Kingsnake – Malicious PDF Metadata Detection

Description- Detects PDF invoice files associated with Crimson Kingsnake using consistent metadata author “hpins”.

Microsoft Sentinel (KQL)