Potential Suspicious Change To Sensitive/Critical Files (86157017-c2b1-4d4a-8c33-93b8e67e4af4)
Detects changes of sensitive and critical files. Monitors files that you don't expect to change without planning on Linux system. These files include, but are not limited to, system configuration files, authentication files, and critical application files. Attackers often target these files to maintain persistence, escalate privileges, or disrupt system operations.