SOHO Hijack - Anomalous Cert Warning (T1587.003)
Correlates browsers encountering a certificate error (invalid issuer) for a major cloud provider due to DNS redirection.
Microsoft Sentinel (KQL)

Correlates browsers encountering a certificate error (invalid issuer) for a major cloud provider due to DNS redirection.

Already have an account?