The White Company

The White Company is a suspected state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led the Operation Shaheen espionage campaign that targeted government and military organizations in Pakistan.

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.