Hide Navigation Hide TOC Remove Immutable File Attribute - Auditd (a5b977d6-8a81-4475-91b9-49dbfcd941f7) Detects removing immutable file attribute. Cluster A Galaxy A Cluster B Galaxy B Level Remove Immutable File Attribute - Auditd (a5b977d6-8a81-4475-91b9-49dbfcd941f7) Sigma-Rules Linux and Mac File and Directory Permissions Modification - T1222.002 (09b130a2-a77e-4af0-a361-f46f9aad1345) Attack Pattern 1 File and Directory Permissions Modification - T1222 (65917ae0-b854-4139-83fe-bf2441cf0196) Attack Pattern Linux and Mac File and Directory Permissions Modification - T1222.002 (09b130a2-a77e-4af0-a361-f46f9aad1345) Attack Pattern 2