Hidden Batch Execution via MSYS2 Bypass (Gogs RCE)
Monitors for Windows cmd.exe executions leveraging '//c' to run hidden batch files. This matches the Metasploit module's evasion technique for bypassing MSYS2 mangling on Windows Gogs installations during the argument injection exploit.
Microsoft Sentinel (KQL)
