Browse Rules

System Audit event.

System Audit event.

Audit: Command: $(audit.exe)

Audit: Command: $(audit.exe)

Auditd: Configuration changed

Auditd: Configuration changed

Audit: Watch - Write access

Audit: Watch - Write access

Audit: Watch - Read access

Audit: Watch - Read access

Audit: Watch - Change attribute

Audit: Watch - Change attribute

Auditd: Start / Resume

Auditd: Start / Resume

Audit: Watch - Write access: $(audit.file.name)

Audit: Watch - Write access: $(audit.file.name)

Audit: Watch - Write access: $(audit.directory.name)

Audit: Watch - Write access: $(audit.directory.name)

Audit: Watch - Read access: $(audit.file.name)

Audit: Watch - Read access: $(audit.file.name)

Audit: Watch - Read access: $(audit.directory.name)

Audit: Watch - Read access: $(audit.directory.name)

Audit: Watch - Change attribute: $(audit.file.name)

Audit: Watch - Change attribute: $(audit.file.name)

Audit: Watch - Change attribute: $(audit.directory.name)

Audit: Watch - Change attribute: $(audit.directory.name)

Audit: Watch - Execute access: $(audit.file.name)

Audit: Watch - Execute access: $(audit.file.name)

System Audit: Vulnerable web application found.

System Audit: Vulnerable web application found.

The audit log was cleared

The audit log was cleared

Audit: Created: $(audit.file.name)

Audit: Created: $(audit.file.name)

Audit: Deleted: $(audit.file.name)

Audit: Deleted: $(audit.file.name)

The audit log was cleared

The audit log was cleared

Ignoring scan messages.

Ignoring scan messages.

Auditd: SELinux permission check

Auditd: SELinux permission check

Auditd: SELinux error

Auditd: SELinux error

Auditd: replay attack detected

Auditd: replay attack detected

Auditd: group ID changed

Auditd: group ID changed

Auditd: user ID changed

Auditd: user ID changed