Suspicious History File Operations (508a9374-ad52-4789-b568-fc358def2c65)

Detects commandline operations on shell history files

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Bash History - T1552.003 (8187bd2a-866f-4457-9009-86b0ddedffa3)	Attack Pattern	Suspicious History File Operations (508a9374-ad52-4789-b568-fc358def2c65)	Sigma-Rules	1
Bash History - T1552.003 (8187bd2a-866f-4457-9009-86b0ddedffa3)	Attack Pattern	Unsecured Credentials - T1552 (435dfb86-2697-4867-85b5-2fef496c0517)	Attack Pattern	2