Translated CQL Rule
Detects execution of the 'socat' utility with command-line arguments indicating the establishment of a network listener. Socat is a multipurpose relay tool that can be abused by adversaries for pivoting, proxying traffic, or creating reverse shells by establishing listener ports.
CQL
