SilverFox – Malicious C2 Communication
This rule detects network connections from internal devices to a specific remote IP address (134.122.155.135) over port 443. This is characteristic of communication with a known or suspicious Command and Control (C2) server.
Microsoft Sentinel (KQL)
