All Detections

IcedId email delivery

Azure Sentinel@AzureSentinel
updated Jun 17, 2025017

Use this query to locate emails and malicious downloads related to the IcedId activity that can lead to ransomware

Microsoft Sentinel (KQL)