Anthropic_AI_Misuse_Report_IOCs - GTG-84006 - MEK/NCRI influence account references
This rule detects references to specific social media handles and identifiers associated with the MEK/NCRI (National Council of Resistance of Iran) influence campaign within email URLs, device process command lines, and miscellaneous device events. It is designed to identify potential engagement with or dissemination of influence-related content on endpoints and in email communication.
Microsoft Sentinel (KQL)
