Netskope Threat Labs

INDICATOR-SHELLCODE Metasploit windows/shell stage transfer attempt

IPS-CFWIPS-SWG

2 SIDs: 30229, 200373

First seen
July 2022
Last seen
September 2026

Detects Metasploit framework payload activity, indicating use of offensive tooling during an intrusion. Spotting these indicators early helps contain an intrusion before cyberattackers expand access.