Power BI phishing and rogue ScreenConnect RMM IOC sweep (URLs, domains, SHA256)

Arnold Chan@slaz

•updated yesterday•6•0•12

Detects network, file, process, and email interactions associated with known IOCs related to Power BI phishing and rogue ScreenConnect campaigns over a 30-day lookback period.