Skip to content

Hide Navigation Hide TOC

Suspicious Reverse Shell Command Line (738d9bcf-6999-4fdb-b4ac-3033037db8ab)

Detects suspicious shell commands or program code that may be executed or used in command line to establish a reverse shell

Cluster A Galaxy A Cluster B Galaxy B Level
Unix Shell - T1059.004 (a9d4b653-6915-42af-98b2-5758c4ceee56) Attack Pattern Suspicious Reverse Shell Command Line (738d9bcf-6999-4fdb-b4ac-3033037db8ab) Sigma-Rules 1
Unix Shell - T1059.004 (a9d4b653-6915-42af-98b2-5758c4ceee56) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2