Cryptominer Adding Windows Defender Exclusions
Detects Windows Defender exclusion modifications. The malicious Hola miner was observed adding exclusions before beginning mining operations.
Microsoft Sentinel (KQL)

Detects Windows Defender exclusion modifications. The malicious Hola miner was observed adding exclusions before beginning mining operations.

Already have an account?