HEAVYGRAM/CHOSEN BRICK Known IOC Hunt (Hash/Domain)

Arnold Chan@slaz

•updated 24 days ago•0•0•1

This rule monitors for execution of files with specific SHA256 hashes known to be malicious, and network connections to a known malicious domain associated with Vultr storage. It aggregates file creation, process execution, and network connection events to detect potential threat activity.