• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    OpenClaw Agentic AI Detection

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Emil Stahl@emilstahl
    •updated Feb 24, 2026•14•1•416

    Detects activity related to OpenClaw (aka Clawdbot or Moltbot) by searching for specific process command line strings, file path keywords, network listeners on port 18789, or scheduled tasks named 'OpenClaw'.

    SentinelOne

    Tags

    T1059.003 - Windows Command ShellT1053.005 - Scheduled TaskT1071.001 - Web ProtocolsTA0002 - ExecutionTA0003 - PersistenceTA0004 - Privilege EscalationTA0011 - Command and ControlProcess CreationFile EventNetwork ConnectionScheduled Task CreatedWindowsSentinelone EDRopenclaw

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?