Anthropic_AI_Misuse_Report_IOCs - GTG-54002 - Fabricated news infrastructure and accounts
This rule detects activity related to specific known fabricated news infrastructure domains and associated social media handles, which are indicative of influence operations. It monitors network connection events, email URL clicks, email communication patterns involving these domains, and process executions that reference these specific accounts or handles.
Microsoft Sentinel (KQL)
