Miasma Exfiltration Repository Creation
Detects command line activity attempting to push, commit, or create repositories containing specific Miasma exfiltration signatures, often associated with the Shai-Hulud malware variant. This rule looks for distinct string patterns in process command lines that indicate the use of Miasma for data exfiltration to code repositories.
Microsoft Sentinel (KQL)
