Geofenced JAR File Download (Bloody Wolf)
Detects the download of a Java Archive (JAR) file initiated by a PDF reader or web browser, specifically from devices located in Uzbekistan. This behavior is characteristic of the Bloody Wolf threat actor's geofenced attacks.
Microsoft Sentinel (KQL)
