Security researcher has disclosed a technique used by the Singularity Linux rootkit to evade Elastic Defend by suppressing module-load telemetry to avoid detection across multiple layers. This research highlights how trusted-process exclusions in endpoint eBPF monitoring can become significant targets for advanced kernel-level threats. According to the report, Elastic Defend has monitored Linux kernel module […]
The post Singularity Rootkit Bypasses Elastic Defend eBPF Module Load Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.