Sudo Privilege Escalation CVE-2019-14287 - Builtin (7fcc54cb-f27d-4684-84b7-436af096f858)

Detects users trying to exploit sudo vulnerability reported in CVE-2019-14287

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Exploitation for Privilege Escalation - T1068 (b21c3b2d-02e6-45b1-980b-e69051040839)	Attack Pattern	Sudo Privilege Escalation CVE-2019-14287 - Builtin (7fcc54cb-f27d-4684-84b7-436af096f858)	Sigma-Rules	1
Sudo Privilege Escalation CVE-2019-14287 - Builtin (7fcc54cb-f27d-4684-84b7-436af096f858)	Sigma-Rules	Sudo and Sudo Caching - T1548.003 (1365fe3b-0f50-455d-b4da-266ce31c23b0)	Attack Pattern	1
Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b)	Attack Pattern	Sudo and Sudo Caching - T1548.003 (1365fe3b-0f50-455d-b4da-266ce31c23b0)	Attack Pattern	2