AFS-3 has two data fetch RPC variants: FS.FetchData and FS.FetchData64 .
Monitor the standard AFS log files, typically located at /var/log/openafs/FileLog . Indicators of compromise or exploitation failure include: Unexpected process restarts or crashes. afs3-fileserver exploit