Code Injection by ld.so PreloadFeb 1, 2023 · attack.persistence attack.privilege_escalation attack.t1574.006 ·
Detects the ld.so preload persistence file. See
man ld.sofor more information.
Modification of ld.so.preloadOct 25, 2022 · attack.defense_evasion attack.t1574.006 ·
Identifies modification of ld.so.preload for shared object injection. This technique is used by attackers to load arbitrary code into processes.