Suspicious Download via Curl from Bashupload
Detects the use of the curl utility to download files from bashupload.app, an anonymous file-sharing service. This behavior was observed in Tropic Trooper campaigns to stage payloads and tools during post-exploitation.
Sigma
