t1546.004 | LoFP

t1546.004

Title	Tags
admin or user activity are expected to generate some false positives	t1546 t1546.004 linux sigma
administrator or network operator can create file in profile.d folders for automation purposes. please update the filter macros to remove false positives.	t1546 t1546.004 endpoint splunk
administrator or network operator can use this commandline for automation purposes. please update the filter macros to remove false positives.	t1053 t1053.002 t1053.003 T1053.006 t1098 T1098.004 t1546 t1546.004 endpoint splunk