SpikeStrip node CLI dynamic decoy generation calling OpenAI/Anthropic APIs
Detects execution of the SpikeStrip CLI via Node.js with dynamic provider configurations for OpenAI or Anthropic, correlated with outbound network connections to their respective public APIs from the same node process.
Microsoft Sentinel (KQL)

