The Gentlemen Custom Tool Suite Execution
Detects the execution or presence of distinct, custom red-teaming utilities and EDR evasion tools favored by The Gentlemen threat actors. This rule identifies specific filenames and command-line arguments associated with these tools.
Microsoft Sentinel (KQL)
