Data Exfil - Known Exfil Cloud Provider Connections (T1567.002)
Detects command-line utilities connecting to notorious cloud storage providers heavily favored by threat actors for data exfiltration.
Microsoft Sentinel (KQL)
Detects command-line utilities connecting to notorious cloud storage providers heavily favored by threat actors for data exfiltration.
Already have an account?