Cron persistence file written to disk by redis-server process

Ibrahim Saud@tektrix

•updated 23 days ago•0•0•3

Detects the Redis server process writing or modifying files within cron configuration directories. This is a common persistence technique used by attackers to gain recurring execution after exploiting vulnerable or misconfigured Redis instances.