Specific Malware Component Detection

This detection identifies file events related to a specific set of malware files that appear to be part of a malicious toolkit, indicating a compromise.

Microsoft Sentinel (KQL)