Process Execution From Shared Memory Directory

심각도 높음 Sigma 탐지 룰. Detects the execution of a binary from the Linux shared memory directory /dev/shm. This directory is a tmpfs mount backed entirely by RAM an…

작성자: Stan Beukers · 원본 라이선스: DRL 1.1 · SigmaHQ 원본