Rule Info
Name
Shell Execution via Nice - Linux
Author
Li Ling, Andy Parkidomo, Robert Rakowski, Blake Hartstein (Bloomberg L.P.)
Description
Detects the use of the "nice" utility to execute a shell. Such behavior may be associated with privilege escalation, unauthorized command execution, or to break out from restricted environments.
Date
2024-09-02 00:00:00
Modified
None
Id
093d68c7-762a-42f4-9f46-95e79142571a
Tags
attack.discovery attack.t1083 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Scan your endpoints, forensic images or collected files with our portable scanner THOR