Linux Package Uninstall — Detection Rule

Detects linux package removal using builtin tools such as "yum", "apt", "apt-get" or "dpkg".

Read the full analysis on IntelFusions