HoneyMyte Exfiltration to Pixeldrain
Detects data exfiltration patterns used by HoneyMyte scripts. The rule monitors for rar.exe compressing files with a specific password or curl.exe uploading data to the Pixeldrain file-sharing service.
Microsoft Sentinel (KQL)
