Skip to content

Commit b04a43f

Browse files
authored
Update file_event_lnx_susp_long_filename_pattern.yml
1 parent d6355de commit b04a43f

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

rules/linux/file_event/file_event_lnx_susp_long_filename_pattern.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
1-
title: Suspicious Long Filename Pattern
1+
title: Suspicious Long Filename Pattern - Linux
22
id: 11629c4d-0fe6-465b-be62-b39a1c442aad
33
status: experimental
44
description: |
5-
Detects creation of files with unusually long filenames (40 or more characters), which may indicate obfuscation techniques used by malware such as VShell.
5+
Detects the creation of files with unusually long filenames (40 or more characters), which may indicate obfuscation techniques used by malware such as VShell.
66
references:
77
- https://www.trellix.com/blogs/research/the-silent-fileless-threat-of-vshell/
88
author: '@kostastsale'

0 commit comments

Comments
 (0)