6 ms·
I am hoping a security subsystem that detects call to external programs (such as sleep in this case) , log them and raise alarm if not in a whitelist.
by srcmap 8y ago
I am hoping a security subsystem that detects call to external programs (such as sleep in this case) , log them and raise alarm if not in a whitelist.
- syntheticcdo 8y agoThreatStack definitely does this, utilizing the OS-exposed auditing frameworks. There are probably open source alternatives as well, but I rely extensively on TS for server-level threat detection.
- AgentME 8y agoYou don't need to make calls to external programs to make good use of an RCE vulnerability like this.