Network Communication From Suspicious Folder To File Sharing Domains

SigmaHQ Detections@sigmaHQ

•updated Oct 25, 2024•1•0•23

Detects executables located in potentially suspicious directories initiating network connections towards file sharing domains. This behavior can indicate data exfiltration or the staging of malicious tools.