T1562.001
Impair Defenses: Disable or Modify Tools
discovered 2026-06-03eBPF rootkit and anti-analysis measures impair host visibility and tooling that would observe the implant.
View on MITRE ATT&CK
eBPF rootkit and anti-analysis measures impair host visibility and tooling that would observe the implant.
View on MITRE ATT&CK