HUNT malicious payload-delivery URL hits
This rule monitors network connections, file events, and process execution command lines for references to a list of known malicious URLs, including indicators associated with ClearFake, IClickFix, AMOS, Remus, and Mozi botnet payloads.
Microsoft Sentinel (KQL)
