Modification of ld.so.preload

심각도 높음 Sigma 탐지 룰. Identifies modification of ld.so.preload for shared object injection. This technique is used by attackers to load arbitrary code into proces…

작성자: E.M. Anhaus (originally from Atomic Blue Detections, Tony Lambert), oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본