A rule set for Wazuh to detect live-off-the-land techniques on Linux and Unix systems.
GNU Affero General Public License v3.0AGPL-3.0