Coder provisioner logs reference malicious data.external.telemetry
Detects the presence of a specific sentinel string 'data.external.telemetry' within Terraform provisioner job logs, which indicates the execution of unauthorized data-collection logic within a compromised or backdoored Terraform module.
Microsoft Sentinel (KQL)
