Remove Immutable File Attribute (34979410-e4b5-4e5d-8cfb-389fdff05c12)

Detects usage of the 'chattr' utility to remove immutable file attribute.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Linux and Mac File and Directory Permissions Modification - T1222.002 (09b130a2-a77e-4af0-a361-f46f9aad1345)	Attack Pattern	Remove Immutable File Attribute (34979410-e4b5-4e5d-8cfb-389fdff05c12)	Sigma-Rules	1
File and Directory Permissions Modification - T1222 (65917ae0-b854-4139-83fe-bf2441cf0196)	Attack Pattern	Linux and Mac File and Directory Permissions Modification - T1222.002 (09b130a2-a77e-4af0-a361-f46f9aad1345)	Attack Pattern	2