enodia-sentinal/tests/fixtures/sids/100070-persistence-permission-change.json

10 lines
158 B
JSON

{
"event": "chmod",
"pid": 4243,
"ppid": 1,
"uid": 0,
"comm": "chmod",
"parent_comm": "bash",
"path": "/etc/cron.d/backup",
"mode": "0o777"
}