Graylog Java spawning shell for stager fetch or bash reverse shell

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•1•0•1

Detects a Java process (Graylog server) spawning a shell or downloader child process that fetches a stager over HTTP(S) or opens a bash /dev/tcp reverse shell.