VerdantBamboo BRICKSTORM Cron/RC Init Persistence on BSD-Linux Edge Appliances
Detects persistence attempts on Linux edge appliances by monitoring for suspicious modifications to cron job directories, system initialization scripts (RC init), and the execution of specific binaries associated with common persistence mechanisms.
Splunk (SPL)
