System Integrity Protection (SIP) Disabled

심각도 보통 Sigma 탐지 룰. Detects the use of csrutil to disable the Configure System Integrity Protection (SIP). This technique is used in post-exploit scenarios.

작성자: Joseliyo Sanchez, @Joseliyo_Jstnk · 원본 라이선스: DRL 1.1 · SigmaHQ 원본