Potential Discovery Activity Using Find - MacOS (85de3a19-b675-4a51-bfc6-b11a5186c971)
Detects usage of "find" binary in a suspicious manner to perform discovery
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18) | Attack Pattern | Potential Discovery Activity Using Find - MacOS (85de3a19-b675-4a51-bfc6-b11a5186c971) | Sigma-Rules | 1 |