DXSCAN C2 Network Connections (BlackHatSect0r/DXQRTXX)
Detects outbound network connections from internal devices to a set of known malicious IP addresses (217.156.122.129, 37.221.66.43) across commonly abused command-and-control ports (8080, 3480, 9998, 9999, 4444).
Microsoft Sentinel (KQL)
