Linux Suspicious Compilation In Temp Directory
Detects the compilation of an executable in a temporary directory, followed by its execution and subsequent deletion. This pattern is indicative of an adversary attempting to compile and run tools on a target system while minimizing forensic artifacts.
YARA-L
