gamma37 5a48934822 Edit Clear Command History ...

I suggest a new point of view to detect that bash_history has been cleared : Instead of trying to detect all the commands that can do that, we could monitor the size of the file and log whenever it has less than 1 line.

2020-05-28 10:52:17 +02:00

..

auditd

Rule fixes

2020-02-20 23:00:16 +01:00

modsecurity

fix: fixed missing date fields in remaining files

2020-01-30 16:07:37 +01:00

lnx_apt_equationgroup_lnx.yml

refactor: moved rues from 'apt' folder in respective folders

2020-02-01 17:59:26 +01:00

lnx_buffer_overflows.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_chattr_immutable_removal.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_clamav.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_dd_delete_file.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_file_or_folder_permissions.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_pers_systemd_reload.yml

Rule fixes

2020-02-20 23:00:16 +01:00

lnx_shell_clear_cmd_history.yml

Edit Clear Command History

2020-05-28 10:52:17 +02:00

lnx_shell_priv_esc_prep.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_shell_susp_commands.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_shell_susp_log_entries.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_shell_susp_rev_shells.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_shellshock.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00

lnx_ssh_cve_2018_15473.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_sudo_cve_2019_14287.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_susp_failed_logons_single_source.yml

fix: fixed casing and long rule titles

2020-01-30 17:26:09 +01:00

lnx_susp_jexboss.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_susp_named.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

lnx_susp_ssh.yml

rule: OpenSSHd rule adjusted

2020-05-15 17:19:32 +02:00

lnx_susp_vsftp.yml

fix: fixed missing date fields in other files

2020-01-30 15:32:39 +01:00