AI Supply Chain - Pickle OS Command Execution (T1059.004)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•1

Detects Python executing OS commands spawned directly from the deserialization of a poisoned Pickle model file. This rule correlates process creation events where 'python.exe' initiates a command interpreter ('cmd.exe', 'sh', 'bash') with file access events to common Pickle file extensions ('.pkl', '.pickle', '.pth', '.bin').