File Time Attribute Change - Linux — Detection Rule

Detect file time attribute change to hide new or changes to existing files.

Read the full analysis on IntelFusions