Linux Base64 Encoded Pipe to Shell

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•1•0•4

Detects suspicious process command line that uses base64 encoded input for execution with a shell