2 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Triple Cross eBPF Rootkit Execve Hijack | High |
| Triple Cross eBPF Rootkit Default LockFile | High |
Showing 2 of 2