• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Check for Maalware Baazar (abuse.ch) hashes in your mail flow

    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Azure Sentinel@AzureSentinel
    •updated Jun 17, 2025•1•0•16

    Check if file hashes published in the recent abuse.ch feed are found in your mail flow scanned by Office 365 ATP.

    Microsoft Sentinel (KQL)

    Tags

    TA0001 - Initial AccessT1588.001 - MalwareTA0042 - Resource DevelopmentT1566 - PhishingT1566.001 - Spearphishing AttachmentS0534 - BazarEmail Malware DetectedEmail Attachment DownloadedOffice 365M365 Unified Audit Logkqltactic:Initial accesstactic:Malware, component

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?