PromptLock AI Malware
KQL query designed to detect executables that invoke the Ollama interface (or other LLM-related activity) while simultaneously monitoring for the creation of potentially malicious script files. The detection specifically correlates suspicious process execution with the creation of .lua, .bat, and .ps1 scripts to broaden coverage and reduce false negatives.
Microsoft Sentinel (KQL)
