detecting-network-scanning-with-ids-signatures

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs creating and editing system-level IDS rule files under /var/lib/suricata and /etc/suricata (and recommends making firewall block rules), which modify system configuration and require elevated (sudo/root) privileges.