Analytics BIOC
Low
✕
Download a script using the python requests module
Download a shell script from a remote location using the Python requests module.
- Module:
- Platform Analytics
- Data source:
- XDR Agent
ATT&CK tactics: Execution (TA0002)
ATT&CK techniques: Command and Scripting Interpreter: Python (T1059.006)
Attacker's goals:
Adversaries may abuse Python commands and scripts to download additional malicious files or for exfiltration.
Investigative actions:
Check whether the executing process is benign and if this was a desired behavior as part of its normal execution flow.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day