T1204.002 on sentinelchangelog.nethttp://sentinelchangelog.net/tags/t1204.002/Recent content in T1204.002 on sentinelchangelog.netHugo -- 0.157.0enFri, 29 May 2026 08:24:12 +0000Gentlemen Ransomware Campaign: New Hunting Queries for EtherRAT/TukTuk IOCs and Web3 C2 Infrastructurehttp://sentinelchangelog.net/posts/2026-05-29-pr-14338/Fri, 29 May 2026 08:24:12 +0000http://sentinelchangelog.net/posts/2026-05-29-pr-14338/Two hunting queries added targeting Gentlemen ransomware campaign artifacts including payload hashes and decentralized Web3/SaaS C2 infrastructure used by EtherRAT and TukTuk malware.CrowdStrike Content Doctor Enhancement: Improved Detection Logic and Alert Customizationhttp://sentinelchangelog.net/posts/2026-05-21-pr-14268/Thu, 21 May 2026 12:01:33 +0000http://sentinelchangelog.net/posts/2026-05-21-pr-14268/Content Doctor improvements to CrowdStrike Falcon detection rules enhancing KQL logic, MITRE mappings, and alert presentation for critical/high severity detections.Microsoft Sentinel Training Lab: Comprehensive Hands-On Security Operations Environment Now Availablehttp://sentinelchangelog.net/posts/2026-04-10-pr-13848/Fri, 10 Apr 2026 15:05:24 +0000http://sentinelchangelog.net/posts/2026-04-10-pr-13848/New deployment-ready training lab delivers 14 guided exercises with pre-recorded telemetry, detection rules, and automation workflows for practical Microsoft Sentinel skill development.