NetSupport Manager beacon to actor-controlled gateway paternal-angrily[.]com
Detects network activity associated with NetSupport Manager remote access software, specifically monitoring for connections to known malicious domains and infrastructure, as well as recurring beaconing patterns indicative of command-and-control behavior.
Suricata
