Notepad++ Supply Chain Attack C2 Infrastructure Chrysalis backdoor.
Detects network connections to domains and IPs associated with the Notepad++ supply chain attack. These indicators are linked to the distribution of Cobalt Strike and the Chrysalis backdoor.
Microsoft Sentinel (KQL)

