Potential Discovery Activity Using Find - Linux — Detection Rule

Detects usage of "find" binary in a suspicious manner to perform discovery

Read the full analysis on IntelFusions