Known Stealth Falcon WebDAV Delivery-Lab Staging Artifact Written to Disk
Detects the creation of specific file artifacts on disk associated with Stealth Falcon's WebDAV-based delivery and staging infrastructure. The rule looks for filenames characteristic of their simulated 'clickfix' and application update social engineering themes.
Sigma
