Split File Into Pieces
This rule detects the execution of the 'split' command, which is commonly used to break large files into smaller, more manageable pieces. Adversaries may use this technique to circumvent data transfer size limits during exfiltration or to prepare data for transfer through channels with size restrictions. The detection focuses on the command line execution of the 'split' utility.
Sigma
