System Information Discovery - Auditd — Detection Rule

Detects System Information Discovery commands

Read the full analysis on IntelFusions