Suspicious Process Spawned by CentreStack Portal AppPool

심각도 높음 Sigma 탐지 룰. Detects unexpected command shell execution (cmd.exe) from w3wp.exe when tied to CentreStack's portal.config, indicating potential exploitati…

관련 CVE: CVE-2025-30406

작성자: Jason Rathbun (Blackpoint Cyber) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본