Talos analyzed six months of PowerShell network telemetry and found that rare domains are over three times more likely to be malicious compared to frequently contacted ones.
First seen on blog.talosintelligence.com
Jump to article: blog.talosintelligence.com/scarcity-signals-are-rare-activities-red-flags/
