MarkiRAT BITS job abuse via bitsadmin pdj to i.php?u= C2
Detects the use of BITSAdmin to create or manage BITS jobs using specific command-line flags that include suspicious external file paths or URLs, which are commonly associated with malicious downloader activity.
Microsoft Sentinel (KQL)
