Elastic detection rule
Named by 2 kept items in this workspace.
Search every workspace for Elastic detection rule. It matches the name as written, so it can find other things that share it.
The items that name it 2
Detection rule titled 'Potential Reverse Shell Activity via Terminal' covering zsh/net/tcp reverse-shell abuse.
Example rule cited for detecting UAC Bypass via ICMLuaUtil Elevated COM Interface.
All technologies in this workspace.