CmdID

CmdID / Commands

python3

This command is an alias of python. tldr-pages

On several platforms 7 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

What detects it

Sigma process creation rules that name python3
highInline Python Execution - Spawn Shell Via OS System LibraryLi Ling, Andy Parkidomo, Robert Rakowski, Blake Hartstein (Bloomberg L.P.)
highLiteLLM / TeamPCP Supply Chain Attack IndicatorsSwachchhanda Shrawan Poudel (Nextron Systems)
highSuspicious Microsoft Office Child Process - MacOSSohan G (D4rkCiph3r)
highTanStack Supply-Chain Attack Execution Indicators - LinuxLeonardo Gasparini
mediumPython Spawning Pretty TTY Via PTY ModuleNextron Systems
mediumPython WebServer Execution - LinuxMohamed LAKRI
mediumSuspicious Child Process of SAP NetWeaver - LinuxElastic (idea), Swachchhanda Shrawan Poudel (Nextron Systems)