Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

This advanced hunting query detects processes communicating with known Tor relay IP addresses.
The public URL in the query is updated daily at 12PM and 12AM UTC.
CSV source is the Tor Project API, obtained with: https://github.com/Dylan-J/Tor-Project-Statistics
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0032