Suspicious CrushFTP Child Process

심각도 보통 Sigma 탐지 룰. Detects suspicious child processes spawned by the CrushFTP service that may indicate exploitation of remote code execution vulnerabilities s…

관련 CVE: CVE-2025-2825, CVE-2025-31161

작성자: Craig Sweeney, Matt Anderson, Jose Oregon, Tim Kasper, Faith Stratton, Samantha Shaw, Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본