Operation Poisson OpenSSH Server Install on Windows Workstation

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects the installation of the OpenSSH Server feature or the creation of an 'sshd' service on Windows workstations. Adversaries may install OpenSSH as a persistent, covert backdoor to maintain access to a compromised host.