CVE-2026-1731 Malware Payloads Detection
This rule detects files by their SHA256 hash that are known to be associated with the exploitation of CVE-2026-1731. This includes payloads such as SparkRAT, VShell, and various web shells and droppers.
Microsoft Sentinel (KQL)
