Inline Python Execution - Spawn Shell Via OS System Library

심각도 높음 Sigma 탐지 룰. Detects execution of inline Python code via the "-c" in order to call the "system" function from the "os" library, and spawn a shell.

작성자: Li Ling, Andy Parkidomo, Robert Rakowski, Blake Hartstein (Bloomberg L.P.) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본