HarborWatch API Heartbeat Detection

Detects network requests to the HarborWatch API heartbeat endpoint. This could indicate monitoring or health checks of the HarborWatch system, which might be benign or could be used by an attacker to check for system availability or to maintain persistence.

Microsoft Sentinel (KQL)