Hunting with Elastic Security: Detecting command and scripting interpreter execution