All Detections

PULSAR Banking Trojan Payload Execution (KREMLIN/REF9334)

avatar
Ankit Mehta@Secvyn
updated 23 days ago002

This rule monitors DeviceFileEvents and DeviceProcessEvents for the execution or presence of files matching a predefined list of known malicious SHA256 hashes.

Microsoft Sentinel (KQL)