hightestEmerging Threat
Peach Sandstorm APT Process Activity Indicators
Detects process creation activity related to Peach Sandstorm APT
windowsprocess_creation
2024-01-15
Peach Sandstorm is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2023. Coverage centers on proxy, windows / process_creation.
Detects process creation activity related to Peach Sandstorm APT
Detects potential C2 communication activity related to Peach Sandstorm APT