Pillow EPS Ghostscript RCE: Python-spawned Ghostscript or shell child (CVE-2026-
Detects suspicious Ghostscript execution patterns where Python spawns Ghostscript with dangerous I/O pipe arguments or disabled SAFER mode, or where Ghostscript spawns shell interpreters.
Microsoft Sentinel (KQL)

