Edge abuse for payload download via console

Detects scenarios where an attacker attemptes to download a payload directly via console.