Linux Base64 Encoded Pipe to Shell — Detection Rule

Detects suspicious process command line that uses base64 encoded input for execution with a shell

Read the full analysis on IntelFusions