Home/ MITRE Matrix/ Defense Evasion/ T1222.002

T1222.002Linux and Mac Permissions

T1222.002 — Linux and Mac Permissions is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 4 detection use cases covering it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

0Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1222 · File and Directory Permissions Modification

Use cases covering this technique (4)

Linux Auditd Change File Owner To Root ESCU actions · hunting P Linux Auditd File Permission Modification Via Chmod ESCU actions · hunting P Linux Auditd File Permissions Modification Via Chattr ESCU actions · hunting P Linux Change File Owner To Root ESCU actions · hunting P