Linux Setgid Capability Set on a Binary via Setcap Utility
심각도 낮음 Sigma 탐지 룰. Detects the use of the 'setcap' utility to set the 'setgid' capability (cap_setgid) on a binary file. This capability allows a non privilege…
작성자: Luc Génaux · 원본 라이선스: DRL 1.1 · SigmaHQ 원본