Linux Base64 Encoded Pipe to Shell (ba592c6d-6888-43c3-b8c6-689b8fe47337)
Detects suspicious process command line that uses base64 encoded input for execution with a shell
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Linux Base64 Encoded Pipe to Shell (ba592c6d-6888-43c3-b8c6-689b8fe47337) | Sigma-Rules | Deobfuscate/Decode Files or Information - T1140 (3ccef7ae-cb5e-48f6-8302-897105fbf55c) | Attack Pattern | 1 |