Adobe Reader Zero-Day C2

Detects network connections to known IP addresses and domains associated with the Adobe Reader zero-day C2 infrastructure.

Microsoft Sentinel (KQL)