FamousSparrow/SparrowDoor/ShadowPad C2 Network Indicators
This rule monitors network connection logs, DNS query logs, and common security logs for known indicators of compromise, specifically IP addresses and domains associated with command and control (C2) infrastructure.
Microsoft Sentinel (KQL)

