IOC with SharePoint ToolPane Exploitation - CVE-2025-53770 (ToolShell)

Detects exploitation attempts of the SharePoint ToolShell 0-day (CVE-2025-53770) using known IOCs and behavior patterns

Sigma