[Intel]: https://github.com/Gui774ume/krie

[timb-machine]

Area

Defensive tools

Parent threat

Defense Evasion, Privilege Escalation, Persistence

Finding

https://github.com/Gui774ume/krie

Industry reference

uses:eBPF
attack:T1620:Reflective Code Loading
attack:T1574:Hijack Execution Flow
attack:T1068:Exploitation for Privilege Escalation
attack:T1562.001:Disable or Modify Tools
attack:T1548:Abuse Elevation Control Mechanism

Malware reference

No response

Actor reference

No response

Component

Linux

Scenario

No response