Ping Command with Hexadecimal IP Address
Detects the execution of the 'ping.exe' command with a hexadecimal encoded IP address in the command line. This technique is often used by adversaries for defense evasion, specifically to obfuscate network communication or command and control activities, making it harder for security tools to detect the target IP address.
Sigma
