All Detections

Bear Activity GTR 2019

Azure Sentinel@AzureSentinel
updated Jun 17, 20252031

Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/apt/apt_bear_activity_gtr19.yml. Questions via Twitter: @janvonkirchheim.

Microsoft Sentinel (KQL)