Bomgar Exploit - BeyondTrust Spawning Command Shell
Detects the exploitation of BeyondTrust/Bomgar appliances where the legitimate support processes (bomgar-rep.exe, bomgar-scc.exe) unexpectedly spawn interactive command shells.
Microsoft Sentinel (KQL)
