System Shutdown/Reboot - Linux — Detection Rule
Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems.
Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems.