Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "TuanLe (GTSC)"

3,707Total
3,116Detection
451Emerging
137Hunting
Detectionmediumtest

User Added To Root/Sudoers Group Using Usermod

Detects usage of the "usermod" binary to add users add users to the root or suoders groups

LinuxProcess Creation
TA0004 · Privilege EscalationTA0003 · Persistence
TuanLe (GTSC)Wed Dec 21linux