Sha1-Hulud Compromised NPM Package File Creation IOC Search
Detects the creation of files associated with NPM packages compromised in the "Sha1-Hulud: The Second Coming" campaign. This is a broad query intended for hunting and requires manual verification of package versions.
Microsoft Sentinel (KQL)
