Network egress to published UAT-7810 ORB network C2 IP address
Detects outbound network traffic originating from internal assets destined for IP addresses identified as Command and Control (C2) infrastructure associated with the UAT-7810 threat actor group.
Suricata
