Megalodon CI/CD - Megalodon String Network Exfil
Correlates processes executing commands containing 'megalodon' with outbound network connections to a specific C2 IP address (216.126.225.129). This rule aims to detect data exfiltration or command and control communication associated with the Megalodon malware.
Microsoft Sentinel (KQL)
