Detects communication to C2 servers mentioned in the operational notes of the ShadowBroker leak of EquationGroup C2 tools

Detects suspicious shell commands used in various Equation Group scripts and tools