• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Red Lamassu C2 Connection

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Kaung Khant Ko@kaungkhantko
    •updated May 26, 2026•4•0•227

    Identifies active Command and Control communication from infected hosts to known Red Lamassu infrastructure by monitoring network connections to specific C2 domains.

    Microsoft Sentinel (KQL)

    Tags

    T1071.001 - Web ProtocolsTA0011 - Command and ControlNetwork ConnectionNetwork Connection OutboundWindowsWindows Defender Atpkql

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?