Steghide File Embedding Detection
Detects the use of the 'steghide' binary with the 'embed' command and specific flags ('-cf' or '-ef') to hide files using steganography. This technique can be used by adversaries to embed malicious payloads or sensitive data within legitimate-looking files, such as images, to evade detection.
Sigma
