CmdID

CmdID / Commands

uname

Print system information. toybox

On Linux, macOS 2 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from the toybox, 0BSD
uname [-asnrvmo]
-sSystem name
-nNetwork (domain) name
-rKernel Release number
-vKernel Version
-mMachine (hardware) name
-aAll of the above (in order)
-oUserspace type

Several platforms

from tldr-pages, CC BY 4.0

Print details about the current machine and the operating system running on it.

Print kernel name

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print all available system information

uname --allIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print system architecture and processor information

uname --machine --processorIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print kernel name, kernel release, and kernel version

uname --kernel-name --kernel-release --kernel-versionIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print system hostname

uname --nodenameIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print the current operating system name

uname --operating-systemIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Display help

uname --helpIdentify

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

macOS

from tldr-pages, CC BY 4.0

Print details about the current machine and the operating system running on it. Note: For additional information about the operating system, try the sw_vers command.

Print kernel name

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print system architecture and processor information

uname -mpIdentify
-mMachine (hardware) name toybox

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print kernel name, kernel release, and kernel version

uname -srvIdentify
-sSystem name toybox
-rKernel Release number toybox
-vKernel Version toybox

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print system hostname

uname -nIdentify
-nNetwork (domain) name toybox

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

Print all available system information

uname -aIdentify
-aAll of the above (in order) toybox

Trips 1 Sigma rule: informationalSystem Information Discovery by Ömer Günal, oscd.community

What detects it

Sigma process creation rules that name uname
highLinux Webshell IndicatorsFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems)
informationalSystem Information DiscoveryÖmer Günal, oscd.community

See also

lsb_release