Pawel Mazur 6e43a294a2 Linux Auditd - Discovery of Capabilities files

2021-11-28 16:48:37 +01:00

..

lnx_auditd_alter_bash_profile.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_audio_capture.yml

Update lnx_auditd_audio_capture.yml

2021-09-05 09:28:53 +02:00

lnx_auditd_auditing_config_change.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_binary_padding.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_capabilities_discovery.yml

Linux Auditd - Discovery of Capabilities files

2021-11-28 16:48:37 +01:00

lnx_auditd_change_file_time_attr.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_chattr_immutable_removal.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_clipboard_collection.yml

Update lnx_auditd_clipboard_collection.yml

2021-09-27 07:59:43 +02:00

lnx_auditd_clipboard_image_collection.yml

Update lnx_auditd_clipboard_image_collection.yml

2021-10-02 09:59:37 +02:00

lnx_auditd_coinminer.yml

rule: coin miner param --cpu-priority

2021-10-09 10:28:16 +02:00

lnx_auditd_create_account.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_cve_2021_3156_sudo_buffer_overflow_brutforce.yml

Add cve tags

2021-10-25 18:40:50 +02:00

lnx_auditd_cve_2021_3156_sudo_buffer_overflow.yml

Add cve tags

2021-10-25 18:40:50 +02:00

lnx_auditd_data_exfil_wget.yml

Adding New Linux Auditd rule - Data Exfil with Wget

2021-11-18 18:03:17 +01:00

lnx_auditd_dd_delete_file.yml

Rename rule service:auditd

2021-07-07 13:53:51 +02:00

lnx_auditd_file_or_folder_permissions.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_find_cred_in_files.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_hidden_files_directories.yml

Update lnx_auditd_hidden_files_directories.yml

2021-09-07 07:57:50 +02:00

lnx_auditd_hidden_zip_files_steganography.yml

Update lnx_auditd_hidden_zip_files_steganography.yml

2021-09-10 07:52:35 +02:00

lnx_auditd_ld_so_preload_mod.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_load_module_insmod.yml

Update lnx_auditd_load_module_insmod.yml

2021-11-02 17:16:59 +01:00

lnx_auditd_logging_config_change.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_masquerading_crond.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_network_service_scanning.yml

Update lnx_auditd_network_service_scanning.yml

2021-09-14 21:02:13 +02:00

lnx_auditd_omigod_scx_runasprovider_executeshellcommand.yml

fix modified

2021-11-11 10:26:08 +01:00

lnx_auditd_password_policy_discovery.yml

removed contributor, added to authors

2021-11-12 19:44:50 +01:00

lnx_auditd_pers_systemd_reload.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_screencapture_import.yml

New Rule - Linux - Auditd - Screencapture with Import Tool

2021-09-21 18:55:48 +02:00

lnx_auditd_screencaputre_xwd.yml

Update lnx_auditd_screencaputre_xwd.yml

2021-09-13 19:08:23 +02:00

lnx_auditd_split_file_into_pieces.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_steghide_embed_steganography.yml

Update lnx_auditd_steghide_embed_steganography.yml

2021-09-11 11:18:08 +02:00

lnx_auditd_steghide_extract_steganography.yml

Update lnx_auditd_steghide_extract_steganography.yml

2021-09-11 11:19:21 +02:00

lnx_auditd_susp_c2_commands.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_susp_cmds.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_susp_exe_folders.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_susp_histfile_operations.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_system_info_discovery2.yml

Update lnx_auditd_system_info_discovery2.yml

2021-09-14 21:02:51 +02:00

lnx_auditd_system_info_discovery.yml

Add missing id

2021-09-03 13:42:15 +02:00

lnx_auditd_system_shutdown_reboot.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_unzip_hidden_zip_files_steganography.yml

Update lnx_auditd_unzip_hidden_zip_files_steganography.yml

2021-09-10 07:54:56 +02:00

lnx_auditd_user_discovery.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_auditd_web_rce.yml

Fix auditd field name

2021-11-11 10:13:48 +01:00

lnx_data_compressed.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

lnx_network_sniffing.yml

Change status for old rules

2021-11-27 11:33:14 +01:00