Gootkit File Delivery
This query surfaces alerts related to Gootkit and enriches with command and control information, which has been observed delivering ransomware.
Microsoft Sentinel (KQL)

This query surfaces alerts related to Gootkit and enriches with command and control information, which has been observed delivering ransomware.

Already have an account?