XMRig CVE-2026-90817 campaign IOC sweep (IP, c3pool, SHA256, SHA1)
Performs an IOC sweep for a known XMRig cryptojacking campaign exploiting a REDCap vulnerability (CVE-2026-90817), detecting matching network connections, file hashes, and process activities across endpoints.
Microsoft Sentinel (KQL)

