All Detections

Program Executed Using Proxy/Local Command Via SSH.EXE

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jul 3, 2025014

Detect usage of the "ssh.exe" binary as a proxy to launch other programs.

Sigma