Windows Suspicious Child Process from Node.js - React2Shell

심각도 높음 Sigma 탐지 룰. Detects suspicious child processes started by Node.js server processes on Windows, which may indicate exploitation of vulnerabilities like C…

관련 CVE: CVE-2025-55182

작성자: Swachchhanda Shrawan Poudel (Nextron Systems), Nasreddine Bencherchali · 원본 라이선스: DRL 1.1 · SigmaHQ 원본