Shell Execution Of Process Located In Tmp Directory

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•2

Detects execution of shells from a parent process located in a temporary (/tmp) directory