Network Connection Initiated To AzureWebsites.NET By Non-Browser Process — Detection Rule

Detects an initiated network connection by a non browser process on the system to "azurewebsites.net". The latter was often used by threat actors as a malware hosting and exfiltration site.

Read the full analysis on IntelFusions