Chisel client reverse SOCKS5 tunnel with TLS skip-verify and keepalive
Detects the execution of the Chisel tunneling tool configured as a client building a reverse SOCKS tunnel with flags such as TLS verification disabled, keepalive, or authentication, or communicating with a known C2 endpoint.
Microsoft Sentinel (KQL)
