Go RAT hVNC C2 beacon over TCP/5556 to known IP (network log)
Detects successful network connections to a known hVNC RAT (GapiUpdate) C2 infrastructure IP address on port 5556, based on DeviceNetworkEvents logs.
Microsoft Sentinel (KQL)

Detects successful network connections to a known hVNC RAT (GapiUpdate) C2 infrastructure IP address on port 5556, based on DeviceNetworkEvents logs.

Already have an account?