zless

Each abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for zless.

zless /path/to/input-file

The command the identifier reads trips no Sigma process-creation rule. This command is from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for zless. The identifier reads the line that runs zless.

The example the identifier reads matches no GTFOBins abuse and trips no Sigma process-creation rule.