Python Initiated Connection

SigmaHQ Detections@sigmaHQ

•updated Apr 7, 2025•0•0•0

Detects a Python process initiating a network connection. While this often relates to package installation, it can also indicate a potential malicious script communicating with a C&C server.