Triple Cross eBPF Rootkit Install Commands — Detection Rule

Detects default install commands of the Triple Cross eBPF rootkit based on the "deployer.sh" script

Read the full analysis on IntelFusions