Linux Virtualization Fingerprinting Commands
This rule detects the execution of specific Linux utilities that can be used to gather system information, related to virtualization and hardware details. Adversaries often use these tools during the discovery phase to understand the environment they have compromised and adjust accordingly.
CQL
