PHP2Shell multipart upload-progress exploitation via CommonSecurityLog
Detects multipart POST requests abusing PHP session.upload_progress features, often associated with PHP2Shell exploitation techniques, followed by server errors, crash indicators, or memory corruption terms.
Microsoft Sentinel (KQL)
