Malicious / Suspicious User-Agent Activity

Ankit Mehta@Secvyn

•updated Oct 7, 2025•34•0•339

Detects authentication and Office activity where User-Agent strings match known malicious, reconnaissance, scanning, or C2 tool fingerprints. Helps identify automated attacks, credential stuffing, and adversary tooling.