Kimsuky Stella_Gary IOC Hunt - File Hashes and C2 IPs
This rule detects potential malicious activity by monitoring for known malicious file hashes (MD5) across file and process events, and correlating them with known Command and Control (C2) infrastructure communication patterns, including specific IP addresses and URI paths.
Microsoft Sentinel (KQL)
