Potential Netcat Reverse Shell Execution — Detection Rule

Detects execution of netcat with the "-e" flag followed by common shells. This could be a sign of a potential reverse shell setup.

Read the full analysis on IntelFusions