SalatStealer execution from ProgramData via known MD5 hash
This rule monitors for the execution of a specific process file located within the 'ProgramData' directory that matches a known malicious MD5 hash.
Microsoft Sentinel (KQL)
This rule monitors for the execution of a specific process file located within the 'ProgramData' directory that matches a known malicious MD5 hash.
Already have an account?