SNOWGLAZE - WebSocket Python Tunneler Connection (T1572)
Identifies the Python-based tunneler establishing a secure Heroku websocket tunnel for reverse proxying, as observed in the SNOWGLAZE threat activity.
Microsoft Sentinel (KQL)
Identifies the Python-based tunneler establishing a secure Heroku websocket tunnel for reverse proxying, as observed in the SNOWGLAZE threat activity.
Already have an account?