Insomnia RAT Python agent persistence via OOBETaskScheduler task
Detects the modification or creation of scheduled tasks using OOBETaskScheduler or referencing Windows Servicing paths, combined with network connections to known malicious domains identified in threat intelligence.
Microsoft Sentinel (KQL)
