Create enumerate-device-drivers-on-linux.yml

mandiant · Jul 22, 2023 · 5b04cda · 5b04cda
1 parent a49c174
commit 5b04cda
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/nursery/enumerate-device-drivers-on-linux.yml b/nursery/enumerate-device-drivers-on-linux.yml
@@ -0,0 +1,16 @@
+rule:
+  meta:
+    name: enumerate device drivers on Linux
+    namespace: collection
+    authors:
+      - "@mr-tz"
+    scope: function
+    att&ck:
+      - Discovery::Device Driver Discovery [T1652]
+  features:
+    - and:
+      - os: linux
+      - api: system
+      - or:
+        - substring: "lsmod"
+        - substring: "modinfo"