Gootkit-malware

This query was originally published on Twitter, by @MsftSecIntel. Gootkit is malware that started life as a banking trojan, and has since extended its capabilities to allow for a variety of malicious activities. The query helps find events related to Gootkit downloads and command-and-control behavior. Reference - https://twitter.com/MsftSecIntel