Potential Suspicious BPF Activity - Linux

심각도 높음 Sigma 탐지 룰. Detects the presence of "bpf_probe_write_user" BPF helper-generated warning messages. Which could be a sign of suspicious eBPF activity on t…

작성자: Red Canary (idea), Nasreddine Bencherchali · 원본 라이선스: DRL 1.1 · SigmaHQ 원본