Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
2
Contributors
2
Categories
2
2
Platforms
2
2
Products / Services
2
MITRE Techniques
2
2
2
2
2
CVEs
71
71
64
58
49
Detects shell or downloader child processes (such as sh, bash, cmd.exe, powershell.exe, curl, or wget) spawned by common server application processes (such as Java, Ruby, Perl, or Exiftool), which may indicate Remote Code Execution (RCE) exploitation such as CVE-2021-26084, CVE-2023-22518, or CVE-2021-22205.
Detects shell or downloader child processes (such as sh, bash, cmd.exe, powershell.exe, curl, or wget) spawned by common server application processes (such as Java, Ruby, Perl, or Exiftool), which may indicate Remote Code Execution (RCE) exploitation such as CVE-2021-26084, CVE-2023-22518, or CVE-2021-22205.