Fake Windows 11 Phishing Domains Detected
Identifies network connections or DNS queries to known phishing domains mimicking Windows 11 update sites, which are used to distribute infostealer malware. These domains are highly specific to this campaign.
Microsoft Sentinel (KQL)
