Suspicious Activity in Shell Commands — Detection Rule

Detects suspicious shell commands used in various exploit codes (see references)

Read the full analysis on IntelFusions