Anthropic_AI_Misuse_Report_IOCs - GTG-24015 - ATodaPotencia references
This rule detects potential indicators of compromise related to the 'ATodaPotencia' campaign by monitoring email URL logs, process command-line arguments, and general device events for the string 'ATodaPotencia'. The rule searches across multiple data sources to identify where this specific handle or artifact appears within an environment.
Microsoft Sentinel (KQL)
