All Detections

Argamal GitHub Payload Retrieval

avatar
Ankit Mehta@Secvyn
updated Jun 30, 2026000

Detects suspicious GitHub-hosted payload retrieval. Argamal has been observed downloading encrypted components from GitHub repositories.

Microsoft Sentinel (KQL)