ROOFDECK/FLATROOF C2 connections to known Lazarus TraderTraitor IPs and domains
Detects outbound network connections to known C2 domains and IP addresses associated with the Lazarus TraderTraitor campaign (ROOFDECK/FLATROOF).
Microsoft Sentinel (KQL)
