Tunnel Vpn Binary Artifact Pritunl Wireguard

Duo Tech@duotech

•updated Aug 9, 2026•1•0•1

Detects presence of pritunl-client or wireguard-go binary/name strings, tunnel/VPN-class tooling observed landing on host prior to agent-parented tunnel activity