BraZetsu Pastebin dead-drop raw URL access (IOC sweep)
Sweeps proxy, firewall and endpoint network telemetry for requests to the three published BraZetsu Pastebin dead-drop raw URLs used to retrieve the XOR-encrypted C2 config.
Microsoft Sentinel (KQL)

