Tajin Group payment-fraud infrastructure IOC match (domains/URLs)

Arnold Chan@slaz

•updated 24 days ago•1•0•2

This rule monitors for user interactions with specific domains and URLs known to be associated with suspicious or malicious activity. It aggregates data from multiple sources, including email clicks (UrlClickEvents), device network activity (DeviceNetworkEvents), device browser events (DeviceEvents), and DNS queries (DnsEvents), to identify potential exposure to these indicators of compromise.