Malicious / Suspicious User-Agent Activity

Ankit Mehta@Secvyn

•updated Jun 30, 2026•1•0•12

Detects authentication and Office activity where User-Agent strings match known malicious, reconnaissance, scanning, or C2 tool fingerprints. Helps identify automated attacks, credential stuffing, and adversary tooling.