Use this skill when you want to demonstrate the SEC-017 detection of writes to privileged / system directories.