OpenEDR Spawning Command Shell
심각도 보통 Sigma 탐지 룰. Detects the OpenEDR ssh-shellhost.exe spawning a command shell (cmd.exe) or PowerShell with PTY (pseudo-terminal) capabilities. This may ind…
작성자: @kostastsale · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. Detects the OpenEDR ssh-shellhost.exe spawning a command shell (cmd.exe) or PowerShell with PTY (pseudo-terminal) capabilities. This may ind…
작성자: @kostastsale · 원본 라이선스: DRL 1.1 · SigmaHQ 원본