SilentCanvas - PowerShell Fetching JPEG over HTTP
Detects PowerShell initiating web requests specifically for .jpeg files, a core component of the staging phase of the SilentCanvas operation.
Microsoft Sentinel (KQL)

Detects PowerShell initiating web requests specifically for .jpeg files, a core component of the staging phase of the SilentCanvas operation.

Already have an account?