PEERSTITCH / CL-STA-0954 IOC sweep: hashes, URL and IPs
Detects endpoint, network, and security log activity matching known indicators of compromise (IOCs) associated with PEERSTITCH / CL-STA-0954, including specific file hashes, IP addresses, and URLs.
Microsoft Sentinel (KQL)
