BRICKSTORM RAT: DoH Beaconing, Known Hashes, or Suspicious ELF Paths Detected
Detects activity associated with the BRICKSTORM threat actor, including known malicious ELF binary execution, unauthorized file path utilization, and suspicious DNS-over-HTTPS (DoH) network traffic directed to public DNS resolvers.
Cortex XDR
