Skip to content

Instantly share code, notes, and snippets.

@Shivammalaviya

Shivammalaviya/Detecting Verblecon Cryptocurrency Miner Activity

Last active April 12, 2022 16:58
Show Gist options
  • Save Shivammalaviya/33766dd26b3467df78d20a3f15b90afa to your computer and use it in GitHub Desktop.
Save Shivammalaviya/33766dd26b3467df78d20a3f15b90afa to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Detecting Verblecon Cryptocurrency Miner Activity
DeviceProcessEvents
| where (FolderPath endswith "javaw.exe" and (ProcessCommandLine contains "-jar" or ProcessCommandLine contains ".jar"))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment