Shai-Hulud Malware Daemonization Execution
Detects process execution containing the __DAEMONIZED=1 environment variable, which is used by the Shai-Hulud npm worm to detach from the parent process and run in the background.
Sigma
Detects process execution containing the __DAEMONIZED=1 environment variable, which is used by the Shai-Hulud npm worm to detach from the parent process and run in the background.
Already have an account?