CmdID

CmdID / Commands

lsmod

Display the currently loaded modules, their sizes and their dependencies. toybox

On Linux 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from the toybox, 0BSD
lsmod

Show the status of Linux kernel modules.

List all currently loaded kernel modules

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

What detects it

Sigma process creation rules that name lsmod
informationalSystem Information DiscoveryÖmer Günal, oscd.community