Suspicious Deno Remote Script Execution
Detects the execution of the Deno runtime attempting to fetch and run a remote script using the '-A' (allow all permissions) flag combined with an HTTP/HTTPS URL, a known behavior of the DinDoor backdoor and other malicious Deno abuse.
Sigma
