| elastic |
File made Immutable by Chattr |
production |
2026-10-09 |
| elastic |
Access Control List Modification via setfacl |
production |
2026-10-09 |
| elastic |
File Execution Permission Modification Detected via Defend for Containers |
production |
2026-10-08 |
| elastic |
File Permission Modification in Writable Directory |
production |
2026-10-08 |
| elastic |
ESXi File Made Executable with chmod |
production |
2026-09-30 |
| elastic |
Suspicious File Made Executable via Chmod Inside A Container |
production |
2026-09-18 |
| elastic |
File Creation in World-Writable Directory by Unusual Process |
production |
2026-09-18 |
| elastic |
System Binary Path File Permission Modification |
production |
2026-09-18 |
| elastic |
Executable Bit Set for Potential Persistence Script |
production |
2026-09-18 |
| elastic |
Potential Unauthorized Access via Wildcard Injection Detected |
production |
2026-09-18 |
| elastic |
Privilege Escalation via CAP_CHOWN/CAP_FOWNER Capabilities |
production |
2026-09-18 |
| splunk |
Linux Auditd Change File Owner To Root |
production |
2026-05-13 |
| splunk |
Linux Auditd File Permissions Modification Via Chattr |
production |
2026-05-13 |
| splunk |
Linux Change File Owner To Root |
production |
2026-05-13 |
| splunk |
Linux Auditd File Permission Modification Via Chmod |
production |
2026-05-13 |
| sigma |
Chmod Targeting Sensitive Directories |
test |
2026-03-18 |
| sigma |
Remove Immutable File Attribute - Auditd |
test |
2022-11-26 |
| sigma |
Remove Immutable File Attribute |
test |
2022-09-15 |
| sigma |
File or Folder Permissions Change |
test |
2021-11-27 |