Linux Doas Tool Execution — Detection Rule

Detects the doas tool execution in linux host platform. This utility tool allow standard users to perform tasks as root, the same way sudo does.

Read the full analysis on IntelFusions