Potentially Suspicious Network Connection To Notion API (7e9cf7b6-e827-11ed-a05b-15959c120003)
Detects a non-browser process communicating with the Notion API. This could indicate potential use of a covert C2 channel such as "OffensiveNotion C2"
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Potentially Suspicious Network Connection To Notion API (7e9cf7b6-e827-11ed-a05b-15959c120003) | Sigma-Rules | Web Service - T1102 (830c9528-df21-472c-8c14-a036bf17d665) | Attack Pattern | 1 |