ImageMagick Ghostscript Delegate Hijack — gs/gswin64c Spawned by magick
Detects ImageMagick processes (magick, convert, mogrify) spawning Ghostscript binaries (gs, gswin64c) from non-standard paths or with suspicious command-line arguments indicative of exploitation attempts, including known proof-of-concept markers.
Cortex XDR
