PHP / web server instability: crash handlers, app errors, process start storms | PHP2SHELL
Detects abnormal PHP execution volume storms, process crashes handled by crash reporters (such as werfault.exe, apport, systemd-coredump), or application error events related to PHP, which may indicate denial of service attacks, exploitation attempts, or severe application instability.
Microsoft Sentinel (KQL)
