Sigma high test sigma

JexBoss Command Sequence

Detects suspicious command sequence that JexBoss

View Source

Detection Logic

{
  "keywords": {
    "
| all": [
      "bash -c /bin/bash",
      "&/dev/tcp/"
    ]
  },
  "condition": "keywords"
}

False Positives

  • ⚠ Unknown

Field Validations

Loading…

Comments (0)

Loading comments...