Axios Compromise C2 Network Traffic
Detects network connections to the known command and control (C2) server and port associated with the compromised axios package payload. This rule specifically looks for network connections or DNS requests to 'sfrclak.com' or connections to IP address '142.11.206.73' on port 8000.
CQL
