INDICATOR-COMPROMISE Win.Tool.EDRSandBlast EDR bypass download attempt

IPS-SWG

1 SID: 61988

Stats

First seen: December 2023
Last seen: June 2026

Description

Detects indicators of compromise consistent with an active intrusion using Win.Tool.EDRSandBlast EDR bypass download attempt.

References

github.com