• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Data Exfiltration to Easyupload.io via HTTP POST or DNS

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated Jun 30, 2026•5•0•9

    Detects potential data exfiltration activity to the file sharing service 'easyupload.io' by monitoring DNS queries, HTTP POST requests, and general network connections to the domain.

    Microsoft Sentinel (KQL)

    Tags

    T1567 - Exfiltration Over Web ServiceT1071.001 - Web ProtocolsT1071.004 - DNSTA0010 - ExfiltrationTA0011 - Command and ControlNetwork Connection OutboundDNS QueryHTTP RequestFile UploadData ExfiltrationNetwork GenericGeneric Network LogMicrosoft IisSquid Proxykql

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?