Bash reverse shell via /dev/tcp redirection
Detects execution of a bash reverse shell using /dev/tcp TCP redirection, a persistence/backdoor technique used by TA458 SpyPress operators on compromised webmail servers to connect back to C2 infrastructure.
Microsoft Sentinel (KQL)
