Modifying Crontab — Detection Rule

Detects suspicious modification of crontab file.

Read the full analysis on IntelFusions