Suspicious Self-Signed TLS C2 Certificate
Detects self-signed TLS certificates on suspicious domains commonly used for C2
Microsoft Sentinel (KQL)

Detects self-signed TLS certificates on suspicious domains commonly used for C2

Already have an account?