Shellshock Expression Detection

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•23

Detects attempts to exploit the Shellshock vulnerability (CVE-2014-6271) by looking for specific shellshock expressions in log files. These expressions are commonly used to inject and execute arbitrary commands.