AIA0002 Cairn staging: connections to known staging IPs 199.247.25.25 / 199.247.
Detects endpoint network connections made to known staging IP addresses often associated with data exfiltration or staging activities.
Microsoft Sentinel (KQL)
Detects endpoint network connections made to known staging IP addresses often associated with data exfiltration or staging activities.
Already have an account?