Successful Shell Attack Detected - Windows 'copy' Command
High Nessus Network Monitor Plugin ID 6177
SynopsisA successful shell attack was detected.
DescriptionThe results of the Windows copy command occurred in a TCP session normally used for a standard service. This may indicate a successful compromise of this service has occurred.
SolutionThe command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.