Hide Navigation Hide TOC Code Injection by ld.so Preload (7e3c4651-c347-40c4-b1d4-d48590fdf684) Detects the ld.so preload persistence file. See man ld.so for more information. Cluster A Galaxy A Cluster B Galaxy B Level Code Injection by ld.so Preload (7e3c4651-c347-40c4-b1d4-d48590fdf684) Sigma-Rules Dynamic Linker Hijacking - T1574.006 (633a100c-b2c9-41bf-9be5-905c1b16c825) Attack Pattern 1 Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6) Attack Pattern Dynamic Linker Hijacking - T1574.006 (633a100c-b2c9-41bf-9be5-905c1b16c825) Attack Pattern 2