Potential Webshell Process Execution

Google SecOps@GoogleSecOps

•updated Sep 29, 2025•0•0•1

Detects on the execution arguments associated with cmd.exe invocations originating from an active ASP.NET webshell.