[Intel]: https://redcanary.com/blog/process-streams/

[timb-machine]

Area

Defensive techniques

Parent threat

Lateral Movement, Command and Control, Exfiltration

Finding

https://redcanary.com/blog/process-streams/

Industry reference

uses:bash
uses:ksh93
attack:T1059:Command and Scripting Interpreter
attack:T1095:Non-Application Layer Protocol

Malware reference

No response

Actor reference

No response

Component

Linux

Scenario

No response

Scenario variation

Enclave deployment