==================================================

CREATED: NIX-ELF-EXEC-FROM-MEMORY (#1950)

Description

This detector identifies processes executing from files mapped into memory on Linux systems without a binary on disk. This technique is used to execute binaries filelessly.

ATT&CK Technique T1055

Did this answer your question?