Kazuar Modules Perform Local Peer Discovery
Detects a module enumerating local processes, named pipes, loopback listeners, mutexes, or shared-memory sections to locate bot peers, indicative of Kazuar malware activity.
Microsoft Sentinel (KQL)

Detects a module enumerating local processes, named pipes, loopback listeners, mutexes, or shared-memory sections to locate bot peers, indicative of Kazuar malware activity.

Already have an account?