Microsoft ClickFix - File Hash IOCs

This rule detects the presence of specific file hashes associated with the Microsoft ClickFix social engineering technique. It identifies files on devices that match a predefined list of SHA256 hashes, indicating potential compromise or interaction with the ClickFix malware.

Microsoft Sentinel (KQL)