Network Connection to Known Malicious Domain files.surveillance-online.com

Ankit Mehta@Secvyn

•updated Sep 21, 2026•0•0•3

This rule monitors DeviceNetworkEvents for any outbound network connections initiated from Windows devices to the domain 'files.surveillance-online.com', which is associated with malicious activity.