System Info Discovery via Sysinfo Syscall

Milad Cheraghi

Detects use of the sysinfo system call in Linux, which provides a snapshot of key system statistics such as uptime, load averages, memory usage, and the number of running processes. Malware or reconnaissance tools might leverage sysinfo to fingerprint the system - gathering data to determine if it's a viable target.

2025-05-30 00:00:00

None

b207d563-a1d9-4275-b349-77d1eb55aa6d

attack.discovery attack.t1057 attack.t1082

Community Rule

Milad Cheraghi

Merge PR #5444 from @CheraghiMilad - Discovery System Info via Sysinfo Syscall

2025-06-05