Webshell Detection With Command Line Keywords — Detection Rule

Detects certain command line parameters often used during reconnaissance activity via web shells

Read the full analysis on IntelFusions