Qakbot discovery activies
Use this query to locate injected processes launching discovery activity. Qakbot has been observed leading to ransomware in numerous instances.
Microsoft Sentinel (KQL)

Use this query to locate injected processes launching discovery activity. Qakbot has been observed leading to ransomware in numerous instances.

Already have an account?