Abyssos hosts file modification via unsigned or newly-dropped temp process
Flags modifications to the Windows hosts file made by an unsigned process or a process freshly dropped in a temp folder within the last 10 minutes, consistent with Abyssos's DNS_ADD/DNS_DEL hosts-file manipulation.
Microsoft Sentinel (KQL)
