Linux Impair Shell History Logging via Environment Var
Detects launching shells with history disabled via environment variables (separate from deleting history files), consistent with impairing command history logging (Defense Evasion).
Sigma

Detects launching shells with history disabled via environment variables (separate from deleting history files), consistent with impairing command history logging (Defense Evasion).

Already have an account?