Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Hackers Exploit Cloudflare Tunnels to Infect Windows Systems With Python Malware

Steven Lim@KQLWizard

•updated Jul 1, 2025•7•0•1,741

KQL Query

Microsoft Sentinel (KQL)

Tags

S0117 - XTunnel S0175 - meek T1583.007 - Serverless T1059.006 - Python T1588.001 - Malware T1587.001 - Malware T1572 - Protocol Tunneling T1071.001 - Web Protocols TA0042 - Resource Development TA0002 - Execution TA0011 - Command and Control Email Malware Detected Email Attachment Downloaded Network Connection File Creation Malware Detected Windows M365 Unified Audit Log Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?