Python Spawning Pretty TTY Via PTY Module

SigmaHQ Detections@sigmaHQ

•updated Nov 4, 2024•0•0•0

Detects a python process calling to the PTY module in order to spawn a pretty tty which could be indicative of potential reverse shell activity.