Skip to content

Hide Navigation Hide TOC

Interactive Bash Suspicious Children (ea3ecad2-db86-4a89-ad0b-132a10d2db55)

Detects suspicious interactive bash as a parent to rather uncommon child processes

Cluster A Galaxy A Cluster B Galaxy B Level
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) Attack Pattern Interactive Bash Suspicious Children (ea3ecad2-db86-4a89-ad0b-132a10d2db55) Sigma-Rules 1
Unix Shell - T1059.004 (a9d4b653-6915-42af-98b2-5758c4ceee56) Attack Pattern Interactive Bash Suspicious Children (ea3ecad2-db86-4a89-ad0b-132a10d2db55) Sigma-Rules 1
Unix Shell - T1059.004 (a9d4b653-6915-42af-98b2-5758c4ceee56) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2