mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
patel-bhavin
7 lines
253 B
YAML
7 lines
253 B
YAML
description: A list of suspicious bash commonly used by attackers via scripts
|
|
filename: linux_tool_discovery_process.csv
|
|
name: linux_tool_discovery_process
|
|
default_match: 'false'
|
|
match_type: WILDCARD(process)
|
|
min_matches: 1
|
|
case_sensitive_match: 'false' |