kqlElastic-2.0from elastic/detection-rules
Tainted Out-Of-Tree Kernel Module Load
Quality
92
FP risk
—
Forks
0
Views
0
Rule sourcerules/linux/persistence_tainted_kernel_module_out_of_tree_load.toml
host.os.type:linux and data_stream.dataset:"system.syslog" and process.name:kernel and
message:"loading out-of-tree module taints kernel."