autossh reverse SSH tunnels with multiple -R forwards or ssh.gputw.ai
Detects persistent reverse SSH tunnels created using autossh or ssh with multiple remote port forwarding parameters (-R), or network activity communicating with a known C2 infrastructure domain (ssh.gputw.ai).
Microsoft Sentinel (KQL)
