attack.t1222.002 | Detection.FYI

Remove Immutable File Attribute
Feb 1, 2023 · attack.defense_evasion attack.t1222.002 ·
Share on:
Detects usage of the 'chattr' utility to remove immutable file attribute.

Read More
Remove Immutable File Attribute - Auditd
Nov 27, 2022 · attack.defense_evasion attack.t1222.002 ·
Share on:
Detects removing immutable file attribute.

Read More
Chmod Suspicious Directory
Oct 25, 2022 · attack.defense_evasion attack.t1222.002 ·
Share on:
Detects chmod targeting files in abnormal directory paths.

Read More
File or Folder Permissions Change
Oct 25, 2022 · attack.defense_evasion attack.t1222.002 ·
Share on:
Detects file and folder permission changes.

Read More