Potential RCE Exploitation Attempt in NodeJS

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•27

Detects errors in NodeJS applications related to process execution, specifically looking for the keyword 'node:child_process'. These errors, especially if triggered by user input, may indicate an attempted Remote Code Execution (RCE) vulnerability exploitation.