Suspicious curl Download from Telegram
Detects the use of curl to download files from Telegram to local temp folder, which may indicate initial malware staging.
Sigma

Detects the use of curl to download files from Telegram to local temp folder, which may indicate initial malware staging.

Already have an account?