AGENTPSD Python Fallback Shell Execution (VerdantBamboo / egnyte_host_monitor_client)

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•3

Detects the execution of the Egnyte Host Monitor Client process based on a known file path pattern or a specific SHA256 file hash. This may be used to track the usage of Egnyte monitoring utilities in the environment.