ATT&CK technique
View on MITRE ATT&CK →
T1055.008
Ptrace System Calls
StealthPrivilege Escalation
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Linux Process Hooking via GDB | production | 2026-09-18 |
| elastic | Privilege Escalation via GDB CAP_SYS_PTRACE | production | 2026-09-18 |
| elastic | Root Network Connection via GDB CAP_SYS_PTRACE | production | 2026-09-18 |
| elastic | Potential Sudo Token Manipulation via Process Injection | production | 2026-09-18 |
| elastic | Deprecated - Network Connection via Sudo Binary | deprecated | 2026-02-04 |