VAPT LLMjacking Framework Privilege Escalation via Hijacked Ollama Compute
Detects activity associated with VAPT (Vulnerability Assessment and Penetration Testing) frameworks, specifically looking for marker strings in process command lines and known VAPT malware names in file and process events. This rule aims to identify potential privilege escalation attempts or the presence of VAPT tools on a system.
Microsoft Sentinel (KQL)
