attack.t1574.006 | Detection.FYI

Modification of ld.so.preload

Dec 8, 2025 · attack.privilege-escalation attack.persistence attack.defense-evasion attack.t1574.006 ·
Share on:

Identifies modification of ld.so.preload for shared object injection. This technique is used by attackers to load arbitrary code into processes.

Read More
Code Injection by ld.so Preload

Oct 23, 2025 · attack.defense-evasion attack.persistence attack.privilege-escalation attack.t1574.006 ·
Share on:

Detects the ld.so preload persistence file. See man ld.so for more information.

Read More