Network Connection to Known Typosquatting Domains
This rule detects network connections or DNS queries to a predefined list of malicious domains. These domains are likely associated with typosquatting or other malicious infrastructure used by adversaries.
Microsoft Sentinel (KQL)
