Claude Code process followed by firewall policy modification on same host

ills3c Intel&Coffee@Ills3C

•updated today•1•0•1

Detects instances where the Claude Code AI assistant CLI or related node processes spawn command-line shells (such as cmd, powershell, bash, sh, zsh), followed by system firewall rule modifications on the same device within a 4-hour window.