OnyxC2 Mutex Creation for Single-Instance Enforcement
Detects creation of the ONYXC2 mutex used by the malware to enforce single-instance execution.
Microsoft Sentinel (KQL)

Detects creation of the ONYXC2 mutex used by the malware to enforce single-instance execution.

Already have an account?