DOGLEASH in-memory execution of MIPS/ARM/x64 compiled payloads
Detects the execution or presence of processes associated with the 'dogleash' tool, specifically identifying command lines or file paths that contain architectural references such as 'mips', 'arm', or 'x64', which is indicative of potential cross-platform malware or backdoor deployment.
Microsoft Sentinel (KQL)
