Midnight Blizzard network IOCs: connections to known C2 IPs and URL paths
Detects network connections and traffic matching known Midnight Blizzard (APT29) IOC Internet Protocol addresses and paths using Microsoft Defender for Endpoint and Common Security Log data.
Microsoft Sentinel (KQL)
