Siemens ROX II - Python Reverse Shell from /tmp
Detects Python reverse shell execution from /tmp/rev_shell.py as described in Siemens ROX II exploitation chain. This specific file path and Python command injection pattern indicates active exploitation of the command injection vulnerabilities in the feature key validation function.
YARA-L
