Abused Debug Privilege by Arbitrary Parent Processes (d522eca2-2973-4391-a3e0-ef0374321dae)
Detection of unusual child processes by different system processes
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Abused Debug Privilege by Arbitrary Parent Processes (d522eca2-2973-4391-a3e0-ef0374321dae) | Sigma-Rules | Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b) | Attack Pattern | 1 |