All Detections

UDPGangster – Mutex Detection

avatar
Ankit Mehta@Secvyn
updated Jun 29, 2026002

This rule detects the presence of the string "xhxhxhxhxhxpp" within the AdditionalFields of DeviceEvents. This string =represents a Mutex Indicator of Compromise (IOC).

Microsoft Sentinel (KQL)