All Detections

Discord Webhook Exfiltration Attempt

avatar
nomit vyas@xoxo
updated Jun 24, 2026104

Detects network connections attempting to exfiltrate data via Discord webhooks. This rule specifically looks for POST requests to the Discord API webhook endpoint.

Microsoft Sentinel (KQL)