
Rule Info
Name
Subinacl Execution
Author
X__Junior
Description
Detects the usage of subinacl that was abused by adversaries in the past in order to modify access permissions.
Date
2025-01-13 00:00:00
Modified
None
Id
22ceada9-65ad-4fbe-ac71-81f5cb77423d
Tags
attack.impact attack.t1489
Type
Nextron Sigma feed only (private)