Communication To Ngrok Tunneling Service - Linux — Detection Rule

Detects an executable accessing an ngrok tunneling endpoint, which could be a sign of forbidden exfiltration of data exfiltration by malicious actors

Read the full analysis on IntelFusions