| Key | Value |
|---|---|
| FileSize | 52444 |
| MD5 | 30AA3537B94AAC2349A6B3BFB2C47828 |
| PackageDescription | Plugins for the audit event dispatcher The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines or analyze events for suspicious behavior. |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | audispd-plugins |
| PackageSection | admin |
| PackageVersion | 1:2.6.6-1ubuntu1.1 |
| SHA-1 | 0C28328B7E25A425AF2B1E810FFAAB7380BC0C48 |
| SHA-256 | 559F24D11872834EB2A1FA961134BBD1D4CF68A5042D3DC004F3BD7581279F75 |
| hashlookup:children-total | 16 |
| hashlookup:trust | 50 |
The searched file hash includes 16 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./sbin/audisp-prelude |
| FileSize | 51424 |
| MD5 | 9B1DDC5A81DA3F9B0480326FD99648E1 |
| SHA-1 | 03D4C0A7EE158F91ED1FFBD53854C748181E0852 |
| SHA-256 | 63FC492B2F0C5CE99080123E9E4BDFEAB5DB4EB332B2205279C359F2EFF9D206 |
| SSDEEP | 768:4UT5snvinmPUKVFW2Lxn8KpvRe73BZNpvlumTQPQdz:P5s3UK3fvRe73BxdoQ |
| TLSH | T19033F902F6A044FDC2A087BA99EB63725DF53C50D22176BEB7146E383A22B1C4F1DB55 |
| Key | Value |
|---|---|
| FileName | ./sbin/audispd-zos-remote |
| FileSize | 30792 |
| MD5 | 9F9A9E0378B88C018F7B39DA4EB974D4 |
| SHA-1 | 0F45341126BE55986E6F2BA6A6B3D09D89CC19F4 |
| SHA-256 | F57EB79CDED22D0AE1D5277235661BAFA4D2B4482D18A90C080E7D842C4DC63D |
| SSDEEP | 768:Uk9KlAk55555555555555555555555GSEQLIHIzOhZM+bbqTOEoug2NNnack:Uk9KZhyM+Ppug |
| TLSH | T174D2E922E27166FDE8A2CB744BC7113175337C42D361167F2784B6742E86F1C8B1DA9A |
| Key | Value |
|---|---|
| CRC32 | 41DA0A99 |
| FileName | ./etc/audisp/plugins.d/au-prelude.conf |
| FileSize | 280 |
| MD5 | FDBE0EAE23D0AB3963F81D4102E1CC4B |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| RDS:package_id | 182052 |
| SHA-1 | 25FE37B04A644C1438DD2B609C6190BAC368918F |
| SHA-256 | CD39364F42336B4A3D5F6E1B56216C4A28732FE90F633413CDC2617304EFA7E6 |
| SSDEEP | 6:mV7id4EjQEXsoA0EvdQj3KYAmJGp6LOjkeGNy9Vd1ZY:mF+JHvElyBPGfRWAVd1G |
| SpecialCode | |
| TLSH | T19AD0C2B121B4B27814093A413A8BC5E999BAB09656281415243D88A46126074E323B86 |
| db | nsrl_modern_rds |
| insert-timestamp | 1679426507.4377716 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./sbin/audisp-remote |
| FileSize | 43096 |
| MD5 | D44B28326FE3B38D155AF18383055510 |
| SHA-1 | 2A1124A923D5C093AE6034B89658AB4290D26445 |
| SHA-256 | 0B451C61E9B37A223F23792E35A0EFB401517291203B447681CFB9D2489A0CCB |
| SSDEEP | 384:zajHxZbXVlnx/UyeCn9Wp63c6myvWYNR7txe1p5pBUJkFv30AbqEjUM1aL2zzv4N:+xlx/UonMpk+mdvoUJ630AZUafI9uc |
| TLSH | T109131B45B2B248BDC592873046EBC3325E35FD54C321A6BF27086B783E56AAC0B1DB57 |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/audispd-zos-remote.8.gz |
| FileSize | 3810 |
| MD5 | 7E55F39A9CB9CBB7015C528056EB4938 |
| RDS:package_id | 182052 |
| SHA-1 | 359BAD44B01EE23C99AD3A381D3763338461D812 |
| SHA-256 | 4D928EC8EEB09FA3AACE085318915952FF4BF7AD287B803325D90C4BA34BF838 |
| SSDEEP | 96:PTHyWRUTUlfYgYb7dAyY77G6Nprzy1+mA:7tUTq+796NA17A |
| TLSH | T107717C27162AF3B1307B23BB80E9A73A006519B994FBC02938406CDD8879702F0D57BE |
| insert-timestamp | 1679426507.3935153 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/audisp-prelude.8.gz |
| FileSize | 2090 |
| MD5 | 175090956E5769A8A62E0D6661119B4A |
| RDS:package_id | 182052 |
| SHA-1 | 48FAABB5DC1C226E51D6B778248D06E4B84FA673 |
| SHA-256 | 5BEDC12EDD0B76387AC16BC221E4911122C8037061364A625A652D9B3AEC8358 |
| SSDEEP | 48:XlW9Q09xm/MVE1O2i+CvNj3/ykO5ECYspE+ltC2dfC+D+lBKB0eQtkbx:w9QoI/MVEsxNjU5/YcE+lo2Vz4jesk1 |
| TLSH | T168411CCD98B33E1F15A373A551287897F73D18391AB4342C5488EBA3DA8A1711F1F423 |
| insert-timestamp | 1679426507.4072115 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/audisp-remote.8.gz |
| FileSize | 788 |
| MD5 | EA760FE34FE2F9A4ED14F89910F1FDE5 |
| RDS:package_id | 182052 |
| SHA-1 | 4FFDE58FD6CEB5089017587C19DFA3573044CAE0 |
| SHA-256 | F92779302EB66FFF8804D7A302E92AFD162F4795B221982DE3653A3FE21755F0 |
| SSDEEP | 24:XevYB4YGTwyU2R7H4MA2yEzUosEPLxXUNmb:Xe9NwyUmj4mz4eXS0 |
| TLSH | T106017A42257121077D4CA909DAE996D5592DC5203E20FF7CE571812D49E364FD3C50DF |
| insert-timestamp | 1679426507.4002094 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | audisp-remote.conf |
| FileSize | 718 |
| MD5 | FA9AC70F4AD5D2CA082189B1FDF76845 |
| RDS:package_id | 182052 |
| SHA-1 | 62A092E1BCC3983B3FC327D74D09AED2CC15BB58 |
| SHA-256 | 6699884C2E1FA435ECF129FCA6E52BFCFC702F41C2E4F2D30B274CE23A172419 |
| SSDEEP | 12:LzAKRDoWZ3wPHt073ebjM5KhdlFRRerYqXEfv+BkwBZHmdEmMDADAkw42dKZr+dQ:1onP+DebLhAr103+mwb+6b+Zr+m5Hptz |
| TLSH | T11E019C7920FA7C331CB2668AF5A1FA8613B97000348D1054736BD5651DAD5F4C7175A2 |
| insert-timestamp | 1679426507.4270637 |
| source | RDS.db |
| Key | Value |
|---|---|
| CRC32 | 88842C8A |
| FileName | ./etc/audisp/plugins.d/audispd-zos-remote.conf |
| FileSize | 436 |
| MD5 | BE9F4B5B737E467A8FF69348A83108E3 |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| RDS:package_id | 182052 |
| SHA-1 | 655063BC53686E399C1154FB82664812C1C188FF |
| SHA-256 | 85BF9CC51764A1EBA91D71BC62F291CD96708875FA364A81EB751148E9E8F3C0 |
| SSDEEP | 12:q0RofnEEgb3duRuRhK4xxi9h0cdYDMfM3aRWid1DfvKoaC:qYofnrgbRhKCi9h0uYdTid17bl |
| SpecialCode | |
| TLSH | T179E0ABF12AC53A630C3126008B9F70D8176BA3F2523E1445722BC6999AAE5A1C30B7D5 |
| db | nsrl_modern_rds |
| insert-timestamp | 1679426507.4327202 |
| source | RDS.db |
| Key | Value |
|---|---|
| CRC32 | 9DA9B2A7 |
| FileName | ./etc/audit/zos-remote.conf |
| FileSize | 246 |
| MD5 | 871BBE04101FF19CF1BAA0DD300C76EC |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| RDS:package_id | 182052 |
| SHA-1 | 6FE4675388A81688FCE3618EEB16B331155DF1CE |
| SHA-256 | 392EF562F7CD7F6A1D474A506C32AD4B9171926A89E9D3BD90F6B420B9847A72 |
| SSDEEP | 6:jLVYQIRQFaH42kQ6VyK7naKQ8JRDEFGMKL3TJyMLEdNj5L/SiXykfXv:jLERTZ6sSaKlvE8HJyMGNtL6iXPfXv |
| SpecialCode | |
| TLSH | T168D0979108C72DF3206607CB022630D0130CA390073F00422D22E70F5F3FA9783172EA |
| db | nsrl_modern_rds |
| insert-timestamp | 1679426507.4216154 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |