Curl.EXE Execution Detection
Detects the execution of 'curl.exe' on Windows systems. This activity can indicate an attempt to download files from a remote location, make web requests to external servers, or potentially be used for command and control communication. Adversaries often use tools like curl for ingress tool transfer or to retrieve additional malicious payloads.
Sigma
