Vendor
low
advisory
Detection of Unusual File Creation by Web Server Processes on Linux
1 rule 4 TTPsThis brief details a behavioral detection strategy for identifying potential web shell deployment and persistence mechanisms by monitoring anomalous file creation activities originating from common web server processes on Linux.
nginx +44
persistence
web-shell
linux
behavioral-detection
1r
4t
updated
medium
threat
Suspicious Command Execution via Web Server on Linux
2 rules 3 TTPsIdentifies suspicious command executions via a web server on Linux systems, which may suggest a vulnerability and remote shell access.
Elastic Defend +43
persistence
initial-access
vulnerability
linux
2r
3t