detecting-network-scanning-with-ids-signatures

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs creating and editing system-level IDS rule and configuration files (e.g., under /var/lib/suricata and /etc/suricata) and suggests firewall changes/isolation, actions that require elevated privileges and modify the machine state.