Python Spawning Pretty TTY (c4042d54-110d-45dd-a0e1-05c47822c937)
Detects python spawning a pretty tty which could be indicative of potential reverse shell activity
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) | Attack Pattern | Python Spawning Pretty TTY (c4042d54-110d-45dd-a0e1-05c47822c937) | Sigma-Rules | 1 |