Candiru AdFection DLL implant SHA256 IOC sweep across Defender tables
Detects the presence of known Candiru Windows DLL implant IOC hashes across device file events, process events, image loads, and email attachments.
Microsoft Sentinel (KQL)
Detects the presence of known Candiru Windows DLL implant IOC hashes across device file events, process events, image loads, and email attachments.
Already have an account?