Argamal RAT BITS Job Download of zaesdl.dat from GitHub C2 Repos
This rule detects the use of BITSAdmin and PowerShell's Start-BitsTransfer utility to download files from known malicious or suspicious GitHub repositories and specific filenames associated with campaign activity.
Microsoft Sentinel (KQL)
