Commit Graph

3 Commits

Author SHA1 Message Date
Ruben Groenewoud 80ee91b0f2 [Rule Tuning] Linux DR Tuning - 11 (#5511)
* [Rule Tuning] Linux DR Tuning - 11

* Update privilege_escalation_potential_suid_sgid_exploitation.toml

* Update rules/linux/privilege_escalation_suspicious_uid_guid_elevation.toml

* Update privilege_escalation_docker_escape_via_nsenter.toml

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
2026-01-07 16:31:13 +01:00
Mika Ayenson fe8c81d762 [FR] Generate investigation guides (#4358) 2025-01-22 11:17:38 -06:00
Ruben Groenewoud 56e8e059b6 [New Rules] Docker Entrypoint Netcon / Nsenter Escape (#3883)
* [New Rules] Docker entrypoint netcon / nsenter escape

* ++

* Update privilege_escalation_docker_escape_via_nsenter.toml

* Update privilege_escalation_docker_escape_via_nsenter.toml

* Better description formatting

* Update execution_egress_connection_from_entrypoint_in_container.toml

* Update privilege_escalation_docker_escape_via_nsenter.toml
2024-07-15 13:07:36 +02:00