Python Initiated Connection — Detection Rule

Detects a Python process initiating a network connection. While this often relates to package installation, it can also indicate a potential malicious script communicating with a C&C server.

Read the full analysis on IntelFusions