Suspicious Asn Organization Change

Detects when a single Autonomous System Number (ASN) is associated with multiple organization names within a short time frame. This could indicate a rebranding or transfer of network blocks to evade sanctions or scrutiny, as seen with the Stark Industries threat activity enabler.

YARA-L