init-process.yaml
Top-level traits or composite_rules keyTrait catalog declares matcher types
SHA-25611f4425ab3d904b8cebdc53f7dbb64d3653e63aa3d064100ba08fab9e206310f
MaleculeH(F)Md
Evidence
18:24… , binaries, -beam, -wasm, -pyc, -staticlib, -elixir, -clojure]
19
20traits:
21 - id: proc-mem-write-failure-probe
22 desc: Probe expects a /proc/1/mem write to fail
23 crit: notable
24 conf: 0.92
25 if:
26 type: text
27 regex: '/proc/1/mem[\s\S]{0,500}forbidden write|forbidden write[\s\S]{0,500}/proc …