Behavioral Manipulation of Whitelisted Executables in Linux for EDR Evasion