All Detections

Linux SSH Session Takeover Detection

avatar
Danny Y@zendannyy
updated Feb 28, 2026053

Detects active SSH session takeover attempts. Watching for common terminal multiplexing utilities attaching to sessions.

Sigma