"cs-method":GET ("cs-uri-query":\/remote_agent.php* "cs-uri-query":action=polldata* "cs-uri-query":poller_id=*) ("cs-uri-query":|\ base64\ \-d\ |\ \/bin\/bash`* OR "cs-uri-query":%7C%20base64%20\-d%20%7C%20%2Fbin%2Fbash%60* OR "cs-uri-query":`whoami* OR "cs-uri-query":powershell* OR "cs-uri-query":cmd* OR "cs-uri-query":wget*)