Linux Doas Tool Execution (067d8238-7127-451c-a9ec-fa78045b618b)
Detects the doas tool execution in linux host platform. This utility tool allow standard users to perform tasks as root, the same way sudo does.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Linux Doas Tool Execution (067d8238-7127-451c-a9ec-fa78045b618b) | Sigma-Rules | Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b) | Attack Pattern | 1 |