From d87b0c95a477d75fb87bd3ce4d382a1eb2e42ff9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=96mer=20G=C3=BCnal?= Date: Thu, 18 Jun 2020 23:55:16 +0300 Subject: [PATCH] Delete lnx_trap.yml --- rules/linux/lnx_trap.yml | 19 ------------------- 1 file changed, 19 deletions(-) delete mode 100644 rules/linux/lnx_trap.yml diff --git a/rules/linux/lnx_trap.yml b/rules/linux/lnx_trap.yml deleted file mode 100644 index bf370db57..000000000 --- a/rules/linux/lnx_trap.yml +++ /dev/null @@ -1,19 +0,0 @@ -title: Trap Command Usage -id: 6faa0d2c-5e4d-431c-b01f-cf447c913e4d -description: Detects Trap command usage -references: - - https://attack.mitre.org/techniques/T1154/ -author: Ömer Günal -date: 2020/06/17 -tags: - - attack.execution - - attack.t1154 -level: low -logsource: - product: linux -detection: - keyword: - - 'trap *' - condition: keyword -falsepositives: - - Legitimate administration activities