GHAPPIER stage-1 marker file .git-checker written to temp dir
Detects the creation of files named '.git-checker' within common temporary directories. This behavior is often associated with staging or persistence mechanisms used by malware or malicious scripts to track execution or environment status.
Microsoft Sentinel (KQL)
