Linux AF_ALG Socket Creation - Kernel Crypto API Exploit Indicator

심각도 높음 Sigma 탐지 룰. Detects creation of AF_ALG (Address Family 38) sockets via the socket() syscall. AF_ALG is the Linux kernel crypto API interface. It is expl…

관련 CVE: CVE-2026-31431

작성자: Gene Kazimiarovich · 원본 라이선스: DRL 1.1 · SigmaHQ 원본