Wget Creating Files in Tmp Directory

Rule Info

Name
Wget Creating Files in Tmp Directory
Author
Joseliyo Sanchez, @Joseliyo_Jstnk
Description
Detects the use of wget to download content in a temporary directory such as "/tmp" or "/var/tmp"
Date
2023-06-02 00:00:00
Modified
None
Id
35a05c60-9012-49b6-a11f-6bab741c9f74
Tags
attack.command_and_control attack.t1105 DEMO
Type
Community Rule

Rule History

Author
Title
Date
Commit
github-actions[bot]
Merge PR #4791 from @nasbench - Promote older rules status from `experimental` to `test`
2024-04-01
jstnk9
feat: new linux rules related to GobRAT malware (#4272)
2023-06-02