opsec_enum.sh / oops_enum.sh Post-Exploitation Script Execution

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•1

Detects the execution of known enumeration shell scripts (opsec_enum.sh, oops_enum.sh) using common Unix command interpreters (bash, sh, dash). These scripts are commonly used by threat actors during the post-exploitation reconnaissance phase to gather system or environment information.