TrustConnect/DocConnect C2 Infrastructure Communication
Detects network connections to identified command and control (C2) infrastructure for both the original TrustConnect malware and its successor, DocConnect. This rule specifically looks for connections to known suspicious domains and IP addresses associated with these malware families.
Microsoft Sentinel (KQL)
