Suspicious Process By Web Server Process

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•0•0

Detects potentially suspicious processes being spawned by a web server process which could be the result of a successfully placed web shell or exploitation