Dark Storm Team Telegram/X Replacement Channel Link Access from Endpoints
Detects endpoints browsing or connecting to known replacement or backup Telegram and X (Twitter) channels associated with Dark Storm Team, based on specific URL regex matching in device network and browser events.
Microsoft Sentinel (KQL)
