Hide Navigation Hide TOC Suspicious Curl File Upload - Linux (00b90cc1-17ec-402c-96ad-3a8117d7a582) Detects a suspicious curl process start the adds a file to a web request Cluster A Galaxy A Cluster B Galaxy B Level Suspicious Curl File Upload - Linux (00b90cc1-17ec-402c-96ad-3a8117d7a582) Sigma-Rules Exfiltration Over Web Service - T1567 (40597f16-0963-4249-bf4c-ac93b7fb9807) Attack Pattern 1 Suspicious Curl File Upload - Linux (00b90cc1-17ec-402c-96ad-3a8117d7a582) Sigma-Rules Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern 1