SPECTRALVIPER XGU::Feature::Cmd System Discovery Primitives Detected
Detects the execution of specific command primitives associated with the SpectralViper threat actor, identified by the presence of specific 'XGU::Feature::Cmd::' command strings within DeviceEvents AdditionalFields.
Microsoft Sentinel (KQL)

