Potentially Suspicious Network Connection To Notion API — Detection Rule

Detects a non-browser process communicating with the Notion API. This could indicate potential use of a covert C2 channel such as "OffensiveNotion C2"

Read the full analysis on IntelFusions