id: b6598f67-233f-4e7e-839d-2379a44fc63e
description: N/A
date: 2025-12-06
author: Swachchhanda Shrawan Poudel (Nextron Systems)
rule_metadata:
    - id: 271de298-cc0e-4842-acd8-079a0a99ea65
      title: Suspicious Child Process from Node.js Server - React2Shell
regression_tests_info:
    - name: Positive Detection Test
      type: evtx
      provider: Microsoft-Windows-Sysmon
      path: regression_data/rules-emerging-threats/2025/Exploits/CVE-2025-55182/proc_creation_win_exploit_cve_2025_55182_susp_nodejs_server_child_process/271de298-cc0e-4842-acd8-079a0a99ea65.evtx
