Potential ransomware activity related to Cobalt Strike
Use this query to look for alerts related to suspected ransomware and Cobalt Strike activity, a tool used in numerous ransomware campaigns
Microsoft Sentinel (KQL)

Use this query to look for alerts related to suspected ransomware and Cobalt Strike activity, a tool used in numerous ransomware campaigns

Already have an account?