Authencesn Crypto Module Load via Modprobe - Copy-Fail Indicator

심각도 높음 Sigma 탐지 룰. Detects kernel auto-loading of the authencesn crypto module via modprobe This occurs when user-space code creates an AF_ALG socket and binds…

관련 CVE: CVE-2026-31431

작성자: Gene Kazimiarovich · 원본 라이선스: DRL 1.1 · SigmaHQ 원본