Detections
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Public event hunting query
spl
· Evidence-linked query artifact; local execution not performed.
index=* ("Aurora" OR "Ransomware") | stats count by host, user, process_name