SnowKiller EDR-Killer Tool Execution (VantaCore Toolkit)
Detects the execution or presence of files, processes, or paths associated with the 'SnowKiller' malware or tool, as identified by keyword matching in process event logs.
Microsoft Sentinel (KQL)
