CL-STA-1062 fscan Network Scanner Execution and Download from 139.180.134.221
Detects the execution of the fscan network scanner binary, its use with common scanning arguments, or any network communication with the known staging IP address associated with the fscan deployment.
SentinelOne

