Telegram Bot API Request (c64c5175-5189-431b-a55e-6d9882158251)

Detects suspicious DNS queries to api.telegram.org used by Telegram Bots of any kind

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Bidirectional Communication - T1102.002 (be055942-6e63-49d7-9fa1-9cb7d8a8f3f4)	Attack Pattern	Telegram Bot API Request (c64c5175-5189-431b-a55e-6d9882158251)	Sigma-Rules	1
Web Service - T1102 (830c9528-df21-472c-8c14-a036bf17d665)	Attack Pattern	Bidirectional Communication - T1102.002 (be055942-6e63-49d7-9fa1-9cb7d8a8f3f4)	Attack Pattern	2