Potential Discovery Activity Using Find - Linux (8344c0e5-5783-47cc-9cf9-a0f7fd03e6cf)
Detects usage of "find" binary in a suspicious manner to perform discovery
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Potential Discovery Activity Using Find - Linux (8344c0e5-5783-47cc-9cf9-a0f7fd03e6cf) | Sigma-Rules | File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18) | Attack Pattern | 1 |