All Detections

Go RAT hVNC C2 beacon over TCP/5556 to known IP (network log)

avatar
Arnold Chan@slaz
updated 24 days ago000

Detects successful network connections to a known hVNC RAT (GapiUpdate) C2 infrastructure IP address on port 5556, based on DeviceNetworkEvents logs.

Microsoft Sentinel (KQL)