Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects attempts to exploit the sudo vulnerability CVE-2019-14287, which allows a user to run commands as root by specifying a user ID of -1 or 4294967295 (NO_UID_T) with the '-u' option, bypassing the sudoers policy.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
2029
Detects attempts to exploit the sudo vulnerability CVE-2019-14287, which allows a user to run commands as root without authentication by specifying a user ID of -1 or 4294967295.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
1025