All Detections

Detection of Skynet Tor Process Creation

avatar
Rajshekar Vijay@WazuhWhiz
updated Jul 6, 20251467

Detects the creation of the Tor process from a specific directory using command line arguments indicative of controlling and logging ports.

Splunk (SPL)