CL-STA-1062 fscan Network Scanner Download and Execution via sdksdk608
Detects the execution of known network scanning and reconnaissance tools (e.g., fscan, httpdf) or commands containing specific suspicious strings often associated with threat actor activity.
CQL

