Security Software Discovery - Linux — Detection Rule

Detects usage of system utilities (only grep and egrep for now) to discover security software discovery

Read the full analysis on IntelFusions