Linux su Login Shell Invocation

Lucas Pinho@lucaslapinho

•updated Aug 17, 2026•0•0•2

Detects the invocation of the 'su' command with a login-shell style argument (e.g., 'su -'), which is used to switch user contexts and potentially elevate privileges.