Potential Xterm Reverse Shell — Detection Rule

Detects usage of "xterm" as a potential reverse shell tunnel

Read the full analysis on IntelFusions