Antivirus Web Shell Detection (fdf135a2-9241-4f96-a114-bb404948f736)
Detects a highly relevant Antivirus alert that reports a web shell. It's highly recommended to tune this rule to the specific strings used by your anti virus solution by downloading a big webshell repo from e.g. github and checking the matches.