STAC4924 Campaign IOC Hunt: DNS/Network Connections to C2, Staging, or Resolver Domains
Detects DNS lookups and outbound network connections to known command and control (C2) and staging domains associated with the STAC4924 campaign. The rule performs strict matching on domain names to ensure that subdomains are identified while avoiding false positives from partial string matches within URLs.
Microsoft Sentinel (KQL)
