CmdID

CmdID / Commands

modprobe

Add or remove modules from the Linux kernel. tldr-pages

On Linux 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Simulate loading a module into the kernel

modprobe --dry-run module_nameIdentify

Load a module into the kernel

sudo modprobe module_nameIdentify

Load multiple modules

sudo modprobe --all module_name1 module_name2 ...Identify

Remove a module from the kernel

sudo modprobe --remove module_nameIdentify

Remove a module and those that depend on it from the kernel

sudo modprobe --remove --remove-holders module_nameIdentify

Show a kernel module's dependencies

sudo modprobe --show-depends module_nameIdentify

What detects it

Sigma process creation rules that name modprobe