Audit Rules Deleted Via Auditctl
심각도 높음 Sigma 탐지 룰. Detects the execution of 'auditctl' with the '-D' command line parameter, which deletes all configured audit rules and watches on Linux syst…
작성자: Mohamed LAKRI · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects the execution of 'auditctl' with the '-D' command line parameter, which deletes all configured audit rules and watches on Linux syst…
작성자: Mohamed LAKRI · 원본 라이선스: DRL 1.1 · SigmaHQ 원본