Potemkin Cpp-Httplib User Agent C2 Communication
Detects network connections initiated by 'RunSearch.exe' on port 443, which is indicative of Potemkin malware using cpp-httplib for command and control (C2) communication.
Microsoft Sentinel (KQL)
Detects network connections initiated by 'RunSearch.exe' on port 443, which is indicative of Potemkin malware using cpp-httplib for command and control (C2) communication.
Already have an account?