KREMLIN C2 via checkeligibitily.workers.dev subdomains
Detects outbound network connections to specific disposable Cloudflare workers.dev subdomains identified as part of the KREMLIN (REF9334) C2 infrastructure.
Microsoft Sentinel (KQL)
Detects outbound network connections to specific disposable Cloudflare workers.dev subdomains identified as part of the KREMLIN (REF9334) C2 infrastructure.
Already have an account?