Malicious Hash Detection - ScreenConnect Installer and Rust-based Loader
Detects the creation or execution of files matching known malicious SHA256 hashes associated with a weaponized ScreenConnect installer and a Rust-based loader. This rule identifies the presence of specific known malicious binaries on endpoints.
Microsoft Sentinel (KQL)
