Stitch-SDK - Base64 Encoding via Node (T1027)
Detects Node.js executing inline base64 encoding specifically aimed at configuration files prior to exfiltration.
Microsoft Sentinel (KQL)

Detects Node.js executing inline base64 encoding specifically aimed at configuration files prior to exfiltration.

Already have an account?