All Detections

Potential Data Exfiltration Via Curl.EXE

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 20251013

Detects the execution of the "curl" process with "upload" flags. Which might indicate potential data exfiltration

Sigma