Linux SELinux Setenforce
Detects attempts to disable SELinux by executing the 'setenforce 0' command on Linux systems. Disabling SELinux can reduce the security posture of a system and is often performed by attackers to bypass security controls.
Cortex XDR
