SPECTRALVIPER Immutable Flag Modification
Detects the use of 'chattr +i' to make files immutable. This technique is used by malware, such as Miasma payloads, to prevent security tools and administrators from deleting malicious artifacts, hindering incident response and forensic analysis.
Microsoft Sentinel (KQL)
