Emil b1425aadfa Split and tweak of linux_docker_privilege_escalation (#3929) ...

* Splitting linux_docker_privilege_escalation into two detections, modifying the queries to more precisely trigger on the activity

* Adding back original author, removing trailing whitespace

* deprecate and update metadata

* Update linux_docker_shell_execution.yml

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>

2026-03-10 12:46:59 +05:30

..

baselines

updating yaml

2025-04-18 13:42:29 -07:00

detections

Actually remove the detection

2026-03-05 09:15:43 -05:00

investigations

rename deprecated directory to removed

2025-03-18 14:14:37 -07:00

stories

updating this detection

2025-04-18 13:35:11 -07:00

deprecation_mapping.YML

Split and tweak of linux_docker_privilege_escalation (#3929)

2026-03-10 12:46:59 +05:30