Linux SELinux Setenforce
Detects attempts to disable SELinux by executing the 'setenforce 0' command on Linux systems. Disabling SELinux can reduce the security posture of a system and is often performed by attackers to simplify post-exploitation activities or to bypass security controls.
CQL
