SharpChisel Execution Detection
Detects the execution of SharpChisel, a .NET port of the Chisel tunneling tool, by monitoring process creation events for the executable name or product metadata. This tool can be used by adversaries to establish internal proxies for command and control traffic.
Sigma
