MITRE ATT&CK Technique
T1021.002
1 query tagged with this technique.
View on MITRE ATT&CK →
-
Analytics Rules
Detect Remote Shell Command Arrival Over Wire
Shell command that arrived over the network — outbound-then-inbound-executed script pattern uncommon in legitimate remote code execution.