Chisel, SoftEther and Tor tunneling tools executed on endpoints (VAPOR PANDA)

Detects the execution and network activity of known tunneling, proxy, and VPN tools such as Chisel, SoftEther, and Tor based on process names, command-line arguments, file paths, and network connections.