Update file_create_lnx_persistence_sudoers_files.yml
This commit is contained in:
@@ -14,7 +14,7 @@ detection:
|
||||
TargetFilename|startswith: '/etc/sudoers.d/'
|
||||
condition: selection
|
||||
falsepositives:
|
||||
- Creation of legitimate files in sudoers.d folder par of administrator work
|
||||
- Creation of legitimate files in sudoers.d folder part of administrator work
|
||||
level: medium
|
||||
tags:
|
||||
- attack.persistence
|
||||
|
||||
Reference in New Issue
Block a user