GapiUpdate stage-status reporting to gapidriver.com/api/rest.php (network log)
Detects outbound network connections from a device to the 'gapidriver.com' domain, specifically targeting the '/api/rest.php' endpoint. This activity is often associated with malware command and control communication.
Microsoft Sentinel (KQL)
