VOID#GEIST C2 TryCloudflare Beaconing Detection
Detects network traffic to known VOID#GEIST C2 domains hosted on TryCloudflare, or the specific command-line execution of `curl.exe` used to send a 'status=success' beacon. This activity confirms a successful compromise by the malware.
Microsoft Sentinel (KQL)
