Suspicious Shell Execution via ff-agent

Duo Tech@duotech

•updated Jul 7, 2026•2•0•11

Detects execution of common shell interpreters initiated by or containing references to ff-agent.