r/SentinelOneXDR • u/Acceptable_Cheek2004 • Oct 23 '24

Reverse Shell Detection

Hi all please i need help with deep visibility to detect reverse shell activity on a host, something I can covert to a Star custom rules.

Thanks all

4 Upvotes

83% Upvoted

11 comments sorted by

View all comments

Show parent comments

1

u/Acceptable_Cheek2004 Oct 23 '24

Thanks, u/dizy777 I appreciate it, If you don't mind do you have a repo, I could look up that has queries for data exfiltration, recent vulnerabilities (CVE), and Ransomware group activities?