Nohup Execution — Detection Rule

Detects usage of nohup which could be leveraged by an attacker to keep a process running or break out from restricted environments

Read the full analysis on IntelFusions