Merge pull request #2686 from Karneades/patch-2

rule: add tag execution to new bpftrace rule
2022-02-11 18:18:30 +01:00
parent 7e46d382f0 c8fa678a9b
commit 44616f6145
1 changed files with 3 additions and 0 deletions
@@ -3,6 +3,9 @@ id: f8341cb2-ee25-43fa-a975-d8a5a9714b39
 status: experimental
 description: Detects the usage of the unsafe bpftrace option
 author: Andreas Hunkeler (@Karneades)
+tags: 
+  - attack.execution
+  - attack.t1059.004
 references:
  - https://embracethered.com/blog/posts/2021/offensive-bpf-bpftrace/
  - https://bpftrace.org/