Suspicious Process By Web Server Process

심각도 높음 Sigma 탐지 룰. Detects potentially suspicious processes being spawned by a web server process which could be the result of a successfully placed web shell …

작성자: Thomas Patzke, Florian Roth (Nextron Systems), Zach Stanford @svch0st, Tim Shelton, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본