Suspicious Shells Spawn by Java Utility Keytool

심각도 높음 Sigma 탐지 룰. Detects suspicious shell spawn from Java utility keytool process (e.g. adselfservice plus exploitation)

관련 CVE: CVE-2021-40539

작성자: Andreas Hunkeler (@Karneades) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본