All Detections

Rclone Activity via Proxy

avatar
SigmaHQ Detections@sigmaHQ
updated Nov 24, 2025000

Detects the use of rclone, a command-line program to manage files on cloud storage, via its default user-agent string

Sigma