attack.t1222.002 | Detection.FYI

Chmod Suspicious Directory

Aug 12, 2024 · attack.defense-evasion attack.t1222.002 ·
Share on:

Detects chmod targeting files in abnormal directory paths.

Read More
File or Folder Permissions Change

Aug 12, 2024 · attack.defense-evasion attack.t1222.002 ·
Share on:

Detects file and folder permission changes.

Read More
Remove Immutable File Attribute

Aug 12, 2024 · attack.defense-evasion attack.t1222.002 ·
Share on:

Detects usage of the 'chattr' utility to remove immutable file attribute.

Read More
Remove Immutable File Attribute - Auditd

Aug 12, 2024 · attack.defense-evasion attack.t1222.002 ·
Share on:

Detects removing immutable file attribute.

Read More