FamousSparrow SparroWocky IOC hunt: hashes, C2 IPs, and domains

Arnold Chan@slaz

•updated 22 days ago•1•0•7

This rule monitors endpoint telemetry (File, Process, and Network events) to identify activity associated with a pre-defined set of known malicious file hashes, IP addresses, and domains. It correlates these indicators to detect potential malware execution, persistence, or command-and-control communication on monitored devices.