Redis Keys Wildcard Enumeration

Detects execution of the Redis KEYS * command, which enumerates all keys stored in the database. This operation is commonly used during reconnaissance after gaining access to an exposed Redis instance, allowing an attacker to discover stored data, application structures, session identifiers, or previously implanted payloads. Because KEYS * performs a full keyspace scan and can impact performance, it is rarely used in production applications and is strongly associated with manual exploration or automated exploitation tooling targeting misconfigured Redis services.