Potassium Mirai C2: thunder.godofthunder.st lookup then TCP 50792 to 134.199.154
Detects potential C2 beaconing activity associated with Potassium by correlating a DNS query for a known C2 domain with a subsequent TCP connection to port 50792 from the same device within a short time window.
Microsoft Sentinel (KQL)
