admin/SigmaHQ-sigma
1
0
Fork 0
mirror of https://github.com/SigmaHQ/sigma synced 2026-06-08 12:34:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
c2045d6a9155bc5df706dca520156fc4ea448144
SigmaHQ-sigma/rules/linux/auditd
T
History
frack113 11cb03181e Order yaml field
2022-10-25 08:53:44 +02:00
..
lnx_auditd_alter_bash_profile.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_audio_capture.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_auditing_config_change.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_binary_padding.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_bpfdoor_file_accessed.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_bpfdoor_port_redirect.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_capabilities_discovery.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_change_file_time_attr.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_chattr_immutable_removal.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_clipboard_collection.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_clipboard_image_collection.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_coinminer.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_create_account.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_cve_2021_3156_sudo_buffer_overflow_brutforce.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_cve_2021_3156_sudo_buffer_overflow.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_cve_2021_4034.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_data_compressed.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_data_exfil_wget.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_dd_delete_file.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_disable_system_firewall.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_file_or_folder_permissions.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_find_cred_in_files.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_hidden_files_directories.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_hidden_zip_files_steganography.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_keylogging_with_pam_d.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_ld_so_preload_mod.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_load_module_insmod.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_logging_config_change.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_masquerading_crond.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_network_service_scanning.yml
Fix related
2022-10-09 17:28:05 +02:00
lnx_auditd_network_sniffing.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_omigod_scx_runasprovider_executeshellcommand.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_password_policy_discovery.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_pers_systemd_reload.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_screencapture_import.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_screencaputre_xwd.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_split_file_into_pieces.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_steghide_embed_steganography.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_steghide_extract_steganography.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_susp_c2_commands.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_susp_cmds.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_susp_exe_folders.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_susp_histfile_operations.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_system_info_discovery2.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_system_info_discovery.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_system_shutdown_reboot.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_systemd_service_creation.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_unzip_hidden_zip_files_steganography.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
lnx_auditd_user_discovery.yml
Order yaml field
2022-10-25 08:53:44 +02:00
lnx_auditd_web_rce.yml
Order yaml field
2022-10-25 08:53:44 +02:00