Cisco Umbrella - Connection to Unpopular Website Detected
'Detects first connection to an unpopular website (possible malicious payload delivery).'
Microsoft Sentinel (KQL)

'Detects first connection to an unpopular website (possible malicious payload delivery).'

Already have an account?