T1059.004 Unix Shell

Named by 2 kept items in this workspace.

Search every workspace for T1059.004 Unix Shell. It matches the name as written, so it can find other things that share it.

The items that name it 2

GhostAction Attack Escalates By Targeting GitHub Users
writeup2026-10-09It is written here as T1059.004 Unix Shell (Execution).
Execution
CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data
advisoryIt is written here as T1059.004 Unix shell (office-cli).
office-cli

All techniques in this workspace.