Usermod to root
Detects the use of the usermod to modify the users permissions. Which can be an indication of privilege escalation attempts on Linux systems
Sigma

Detects the use of the usermod to modify the users permissions. Which can be an indication of privilege escalation attempts on Linux systems

Already have an account?