Silenttrinity Stager MSBuild Network Connection
Detects outbound network connections initiated by msbuild.exe to common C2 ports (80, 443), which could indicate the use of Silenttrinity or other MSBuild-based execution for command and control.
Sigma
Detects outbound network connections initiated by msbuild.exe to common C2 ports (80, 443), which could indicate the use of Silenttrinity or other MSBuild-based execution for command and control.
Already have an account?