Silenttrinity Stager Msbuild Activity (50e54b8d-ad73-43f8-96a1-5191685b17a4)

Detects a possible remote connections to Silenttrinity c2

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Silenttrinity Stager Msbuild Activity (50e54b8d-ad73-43f8-96a1-5191685b17a4)	Sigma-Rules	MSBuild - T1127.001 (c92e3d68-2349-49e4-a341-7edca2deff96)	Attack Pattern	1
Trusted Developer Utilities Proxy Execution - T1127 (ff25900d-76d5-449b-a351-8824e62fc81b)	Attack Pattern	MSBuild - T1127.001 (c92e3d68-2349-49e4-a341-7edca2deff96)	Attack Pattern	2