++

Aegrah · Aegrah · commit 9ce3947d8821 · 2025-12-02T12:00:57.000+01:00
diff --git a/rules/linux/persistence_web_server_unusual_command_execution.toml b/rules/linux/persistence_web_server_unusual_command_execution.toml
@@ -22,6 +22,7 @@ rule_id = "65f28c4d-cfc8-4847-9cca-f2fb1e319151"
 severity = "medium"
 tags = [
   "Domain: Endpoint",
+  "Domain: Web",
   "OS: Linux",
   "Use Case: Threat Detection",
   "Tactic: Persistence",
