Log Tampering Followed by Service Manipulation

Danny Y@zendannyy

•updated May 13, 2026•0•128

This rule detects potential log tampering activities on Linux systems followed by service manipulation within a 20-minute window on the same host.