All Detections

Cron Job Creation/Edit with Temporary/Writable Payload

avatar
Danny Y@zendannyy
updated Apr 22, 202610122

Detects cron job creation or edits that execute payloads from temporary or writable directories.

CQL