HEAVYGRAM/CHOSEN BRICK Known IOC Hunt (Hash/Domain)
This rule monitors for execution of files with specific SHA256 hashes known to be malicious, and network connections to a known malicious domain associated with Vultr storage. It aggregates file creation, process execution, and network connection events to detect potential threat activity.
Microsoft Sentinel (KQL)
