Linux Setuid Capability Set on a Binary via Setcap Utility
심각도 낮음 Sigma 탐지 룰. Detects the use of the 'setcap' utility to set the 'setuid' capability (cap_setuid) on a binary file. This capability allows a non privilege…
작성자: Luc Génaux · 원본 라이선스: DRL 1.1 · SigmaHQ 원본