Ömer Günal 4b1557a587 Setuid and Setgid ...

Detects suspicious change of file privileges with chown and chmod commands

2020-06-16 20:12:24 +03:00

..

auditd

Merge pull request #772 from gamma37/suspicious_activities

2020-05-23 18:11:32 +02:00

modsecurity

fix: fixed missing date fields in remaining files

2020-01-30 16:07:37 +01:00

lnx_apt_equationgroup_lnx.yml

refactor: moved rues from 'apt' folder in respective folders

2020-02-01 17:59:26 +01:00

lnx_buffer_overflows.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_chattr_immutable_removal.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_clamav.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_dd_delete_file.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_file_or_folder_permissions.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_pers_systemd_reload.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_setuid_setgid

Setuid and Setgid

2020-06-16 20:12:24 +03:00

lnx_shell_clear_cmd_history.yml

Update lnx_shell_clear_cmd_history.yml

2020-05-28 10:56:35 +02:00

lnx_shell_priv_esc_prep.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_shell_susp_commands.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_shell_susp_log_entries.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_shell_susp_rev_shells.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_shellshock.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_ssh_cve_2018_15473.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_sudo_caching.yml

sudo caching

2020-06-16 19:31:02 +03:00

lnx_sudo_cve_2019_14287.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_sudo_enumeration.yml

Update lnx_sudo_enumeration.yml

2020-06-16 19:20:42 +03:00

lnx_susp_failed_logons_single_source.yml

fix: fixed casing and long rule titles

2020-01-30 17:26:09 +01:00

lnx_susp_jexboss.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_susp_named.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_susp_ssh.yml

rule: OpenSSHd rule adjusted

2020-05-15 17:19:32 +02:00

lnx_susp_vsftp.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00