Potential Compromised 3CXDesktopApp Beaconing Activity - DNS
Detects potential beaconing activity to domains associated with the 3CXDesktopApp supply chain compromise. This rule specifically looks for DNS queries to known malicious domains identified during the compromise.
Sigma

