Execution:Runtime/ReverseShell

Named by 2 kept items in this workspace.

1 items name it under classification.key entities and 1 under techniques.

Search every workspace for Execution:Runtime/ReverseShell. It matches the name as written, so it can find other things that share it.

The items that name it 2

AWS EKS forensics: data sources and investigation tooling (Synacktiv)
articleas techniques
GuardDuty Runtime Monitoring finding raised when a shell with a redirected network connection runs inside a container, tracing process lineage back to the pod via eBPF
AWS EKS Forensics: Data Sources and Investigation Tooling
articleas classification.key entities

All techniques in this workspace.