Coder provisioner job logs reference data.external.telemetry sentinel

Arnold Chan@slaz

•updated Sep 7, 2026•0•0•1

This rule detects process command line arguments that include the string 'data.external.telemetry', which may indicate the use of specialized tools, telemetry collection agents, or unauthorized data exfiltration channels.