PaperCut reverse SOCKS5 bridge kit scripts and Java bridge artifacts
Detects the execution of PaperCut reverse SOCKS5 bridge kit operator-side scripts (such as admin_bridge.py, live_reverse_socks5.py, start_socks.sh) or the creation of related Java bridge class artifacts.
Microsoft Sentinel (KQL)

