All Detections

CreepyDrive URLs

Azure Sentinel@AzureSentinel
updated Jun 17, 2025023

'CreepyDrive uses OneDrive for command and control. This detection identifies URLs specific to CreepyDrive.'

Microsoft Sentinel (KQL)