Suspicious Non-Browser Network Communication With Telegram API — Detection Rule
Detects an a non-browser process interacting with the Telegram API which could indicate use of a covert C2
Detects an a non-browser process interacting with the Telegram API which could indicate use of a covert C2