OnyxC2 known-IOC match: hash or IP from curated feed (freshness-checked)

Matches endpoint file/process hashes and network IPs against a curated, freshness-checked OnyxC2 indicator feed.

Microsoft Sentinel (KQL)