DcRAT Operation DragonReturn CTG Server Limited (AS152194) C2 and Payload Hosting IPs
This rule detects network connections to known malicious IP addresses or attempts to resolve specific domains associated with malicious activity. It monitors for outbound network traffic patterns identified as potential indicators of compromise (IOCs) linked to command and control (C2) servers.
Cortex XDR
