LANDFALL Android Spyware Hash Detection
Detects known malicious files associated with the LANDFALL Android spyware by their SHA256 hash. This provides a high-fidelity method for identifying the presence of the spyware on an endpoint.
Microsoft Sentinel (KQL)

