Compromised Windows Iis Server Webshell

Detects a potentially compromised webshell being executed on windows IIS server. This would mean a threat actor has gained access into a server, potentially looking to backdoor or elevate privileges.

YARA