This week I break down webshells for threat hunting and incident response triage.