Floci API Gateway VTL SSTI RCE — Java Child Process and Proof File
Detects the creation or execution of files associated with the Floci remote code execution (RCE) proof-of-concept tool. It monitors for specific filenames or command-line patterns indicative of this exploit, particularly when spawned from Java-based applications or involving shell command execution.
CQL
