Cloudflare Eviltokens: Gotta catch’em all v2

Ethan Andrews@eandrews

•updated May 27, 2026•29•0•104

KQL Query from file: Cloudflare Eviltokens: Gotta catch’em all (Originally Authored by: Steven Lim (SlimKQL) Expanded the original query to provide more context useful for investigation. Original: https://systemtwosecurity.com/share/rule/Mn1XS6n9?utm_source=social&utm_medium=copy_link&utm_campaign=share&utm_content=detection