8d/c4/8dc4e1a1a7ae3e8dba9914f96a2cfce77d6c3dcea03530951f10aca0c699934a
Composite catalog lists alternative rulesComposite catalog requires rule references
SHA-2568dc4e1a1a7ae3e8dba9914f96a2cfce77d6c3dcea03530951f10aca0c699934a
MaleculeH(F)Md
Evidence
⋯11 lines
12 - python
13 attack: T1059.006
14traits:
15- id: tmp-hidden-chmod-777
16 desc: Drop to hidden /tmp path, chmod 0777
17 crit: suspicious
18 conf: 0.9
19 attack: T1222.002
⋯27 lines