Mount Execution With Hidepid Parameter — Detection Rule
Detects execution of the "mount" command with "hidepid" parameter to make invisible processes to other users from the system
Detects execution of the "mount" command with "hidepid" parameter to make invisible processes to other users from the system