Nezha Agent Installation as Persistent Backdoor
Detects the installation and service creation of the Nezha agent, a monitoring tool often abused by threat actors to establish persistent backdoors on compromised systems.
Microsoft Sentinel (KQL)
Detects the installation and service creation of the Nezha agent, a monitoring tool often abused by threat actors to establish persistent backdoors on compromised systems.
Already have an account?