Rules Web shell detected An event is generated when the UMV WSS agent detects a web shell on a server.