Microsoft Sync Center Suspicious Network Connections — Detection Rule

Detects suspicious connections from Microsoft Sync Center to non-private IPs.

Read the full analysis on IntelFusions