CmdID

CmdID / Commands

kmod

Manage Linux kernel modules. tldr-pages

On Linux 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from tldr-pages, CC BY 4.0

Manage Linux kernel modules. This program is usually called via its symlinks: lsmod, rmmod, insmod, modinfo, modprobe, and depmod. See their respective pages for more information.

List currently loaded kernel modules

kmod listIdentify

Display the static device nodes information provided by the modules of the currently running kernel

kmod static-nodesIdentify

What detects it

Sigma process creation rules that name kmod
highAuthencesn Crypto Module Load via Modprobe - Copy-Fail IndicatorGene Kazimiarovich