Clear or Disable Kernel Ring Buffer Logs via Syslog Syscall

심각도 보통 Sigma 탐지 룰. Detects the use of the `syslog` syscall with action code 5 (SYSLOG_ACTION_CLEAR), (4 is SYSLOG_ACTION_READ_CLEAR and 6 is SYSLOG_ACTION_CONS…

작성자: Milad Cheraghi · 원본 라이선스: DRL 1.1 · SigmaHQ 원본