Access of Sudoers File Content

SigmaHQ Detections@sigmaHQ

•updated Jun 5, 2025•0•0•0

Detects the execution of a text-based file access or inspection utilities to read the content of /etc/sudoers in order to potentially list all users that have sudo rights.