Supply Chain Tool Keyword Process Execution

Ankit Mehta@Secvyn

•updated Jun 25, 2026•0•0•4

Detects the execution of processes with command-line arguments containing keywords related to known supply chain attacks (e.g., solarwinds, 3cx, kaseya, npm, pypi). This rule is intended for threat hunting to identify potential exploitation attempts or malicious activity involving software supply chain components.