All Detections

APT Baby Shark

Azure Sentinel@AzureSentinel
updated Jun 17, 20253017

Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/apt/apt_babyshark.yml. Questions via Twitter: @janvonkirchheim.

Microsoft Sentinel (KQL)