All Detections

apt ta17 293a ps

Azure Sentinel@AzureSentinel
updated Jun 17, 2025012

Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/apt/apt_ta17_293a_ps.yml. Questions via Twitter: @janvonkirchheim.

Microsoft Sentinel (KQL)