VerdantBamboo Payload Execution
Detects the execution of known VerdantBamboo payload names (luserput, ovs-dbctl, egnyte_host_monitor_client) or specific malicious deployment paths, indicating potential PLENET, BRICKSTORM, or AGENTPSD malware activity on compromised Linux and edge devices.
Microsoft Sentinel (KQL)
