| Key | Value |
|---|---|
| FileSize | 397200 |
| MD5 | DF095C76525D0D518234C6E9C02FBEF1 |
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
| PackageMaintainer | Ubuntu MOTU Developers <ubuntu-motu@lists.ubuntu.com> |
| PackageName | auditd |
| PackageSection | admin |
| PackageVersion | 1.7.13-1ubuntu2 |
| SHA-1 | 16AEE77BE31520F22D4690469AE7919FCFC2EF55 |
| SHA-256 | 87DC1D8C1496181333A00954C399128E6252E102F829009EA3A8891B3E3E89E2 |
| hashlookup:children-total | 39 |
| hashlookup:trust | 50 |
The searched file hash includes 39 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./sbin/auditctl |
| FileSize | 128876 |
| MD5 | 9276B252F192ACEB8FC45ED1602AB776 |
| SHA-1 | 040CB38113849B558D9A8DD66A8A8FFC99EE8A0E |
| SHA-256 | E5895CCE3DB60F827ABF78E960314B9A65910537454659BF21C0B32BA59DADF1 |
| SSDEEP | 3072:VHFjRzJSWC84PUs5l0CLDvx+rtlU1Ji1a4qvJozpS:VH/zMWC84PUpoDvxitlai1aZe9S |
| TLSH | T17BC34A45BB314207C19A19B1EDABABC5737DFDC58258830A630EB25F25770B06A87BDC |
| Key | Value |
|---|---|
| FileName | ./usr/bin/aulastlog |
| FileSize | 9844 |
| MD5 | 72D805BC51AB06805D8702E0C79BA1C9 |
| SHA-1 | 07E84180BCF15556B5786A216FFFDFB2D687A601 |
| SHA-256 | ED9985E65ECAD4E8E64A083C6D2B3D7CE0D11B85E86EC005C39E739B776B9674 |
| SSDEEP | 192:j6xYp/EDqJYwSMYBdw6Iu7J3cLjC7C7r2KDTI9YvSd28:QgcDqJtSbwmJ3cLjC7C7zI9/ |
| TLSH | T16D12B852F3068912C2963B3405AF07A0636AA58051945A9FBF0E135F76F132A0C37FDD |
| Key | Value |
|---|---|
| FileName | auditd.conf |
| FileSize | 680 |
| MD5 | 664D289B80288D1E182C4FB194757817 |
| RDS:package_id | 187003 |
| SHA-1 | 11661A65CC18B21752E765B7A00266E43F298831 |
| SHA-256 | 109F9B40FE3BA12B1666C34B83690C93C211559E60ECC45D449FB559D556C90B |
| SSDEEP | 12:LzAKR4MoKK9M7tJSPhp2MEIZoQxQ3j4HTXeOQ600tMSQrRBAVo3zpWpK/Kfrv:vK/Php2MEIrKj4HDjQ60KSjA0t/wv |
| TLSH | T1AB01FEA855E8F9A6907BEAC2E093018F0179B418305826213A1FF429FABCC809B83650 |
| insert-timestamp | 1679424419.4797292 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/ausearch.8.gz |
| FileSize | 3016 |
| MD5 | 85957AC955498ABA3AD318263258A7AC |
| SHA-1 | 135808A008C207CD8F4A9EFBB7542E004FE92529 |
| SHA-256 | E19EBC46C0C57FCCED459CA99FF79C70465AFF135D42EA6405F84B30E01E548C |
| SSDEEP | 48:XU7RD6aiN3nSi5GMntByjNbdY+exk4l11PPdDW6sygvK9rRzS1nG6IS:ema03nSwXpfx/11XxWndk6b |
| TLSH | T197515C6A1B149176DCA673789BD38DC69CC20ED610DC3F822B19ED96D8570F97006984 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/TODO |
| FileSize | 3284 |
| MD5 | 476E4BEBE5C1879F8315B04EA4E46E6F |
| SHA-1 | 2FF3C460FA827D82DEA8B9ABCD41D140B7E0A676 |
| SHA-256 | 67BD61023A63051667129BBE5CD99A27E814621284A93F3725242E3CF1CCB2B8 |
| SSDEEP | 48:5jBKS+WvVMS0xPrjhfy1tdZBIZgaAuv/2YaktDxntoCNLv:DKS+WvWS0xpy1bT2RBLRttmqLv |
| TLSH | T13F619637651D11262CD153F2A31228A2B31EC2EE971C5E7EF0BED3066B4E6B4557E2C8 |
| Key | Value |
|---|---|
| FileName | ./usr/bin/ausyscall |
| FileSize | 9760 |
| MD5 | 6290DFD61E7D8155AEBE017B01777AD4 |
| SHA-1 | 37079ABCFE38D7AFB32F0B529081C4191CADE9D5 |
| SHA-256 | 6279F4B96599C7DDF402E4A0E037D57259EABD45DA1A6AD7B29F0B20369A4A05 |
| SSDEEP | 96:gshVEVJL6ZJOMm9IhOTqMt8aaKN7Ot7r2W2CvX8jsphWSneZlTvmrDJ1jMI:gsbEV9C9hfvaRN7C72IXWSJX |
| TLSH | T18C12A643F32A8A21C545337859EF07600368DA84D9A4668FDB49B60B21F662B1C77F9D |
| Key | Value |
|---|---|
| CRC32 | 1DD87932 |
| FileName | af_unix.conf |
| FileSize | 359 |
| MD5 | 64E9C248CED25E16B59769E716688CA6 |
| OpSystemCode | 362 |
| ProductCode | 14897 |
| RDS:package_id | 187003 |
| SHA-1 | 3EFACF98091DCAB57CE4CF0CD9811B94F978EE92 |
| SHA-256 | E24AF7D6260E9AF4EA2CD39E728691BAD4EDA8FF342310A9E4FD80CF73A92412 |
| SSDEEP | 6:mV7+QIKRcGreM2K/jcAu4YcqMqMoaeGiXCR2SFhGi+g4VxZ/dMYeIPTgnHtVbK/3:mFAKR3reMlcAhYc+MpeGiSRBQ/g41/db |
| SpecialCode | |
| TLSH | T134E061A2D5A03A2538E80B11AB5D8295FC2596C83B340017282D3C1001039209263EDC |
| db | nsrl_modern_rds |
| insert-timestamp | 1679424419.464056 |
| source | RDS.db |
| Key | Value |
|---|---|
| CRC32 | DB06F3F2 |
| FileName | changelog.gz |
| FileSize | 8535 |
| MD5 | 8042C0F378A8FD94ECB2C2B19609238C |
| OpSystemCode | 362 |
| ProductCode | 13453 |
| SHA-1 | 3FE814149FEF5E8D183230FBDE1F9108CCE623C6 |
| SHA-256 | F39979B1052B8966A9B05491315D7B8E7FDA199F02CF697557B1F841785878A5 |
| SSDEEP | 192:gqXrNKQ3sFlf17qrKliurDYim7EUncKz+S6Ty8ct0skSgXes+0GDLXQ:JNBClfd6K8V7EycccOiskSeRULA |
| SpecialCode | |
| TLSH | T11F02AFE806930E5F859DD8F4C4CAF835E5D348BA32F5A54A345492FB9812CE213371E6 |
| db | nsrl_modern_rds |
| insert-timestamp | 1647001968.494406 |
| source | NSRL |
| Key | Value |
|---|---|
| CRC32 | 1EC45F21 |
| FileName | ./usr/share/doc/auditd/examples/auditd.cron |
| FileSize | 271 |
| MD5 | 38EABF76CB16946B506A2FE853DE2863 |
| OpSystemCode | 362 |
| ProductCode | 214118 |
| RDS:package_id | 222721 |
| SHA-1 | 45BCD14824122202B143E78E59533968C933A5B5 |
| SHA-256 | 8655D58E59EB7420D5182AA76017DAF40452EBABC1A5131DE0A7320AEEEE2368 |
| SSDEEP | 6:hhRGk+O8cOBFsNRY+sgkldrn1vsYCs6ZZA49jsfBrvOFqfn:tGkgNo6gkv5sYr6ZZbpLFqfn |
| SpecialCode | |
| TLSH | T19ED0C203290858300B1503A34A42696210A8104E3E37F06425EE275DFA93ADFB0C775E |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040704.3995628 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/system-config-audit/changelog.Debian.gz |
| FileSize | 1786 |
| MD5 | 10E1BA4ABBF58B0E0164DDCA96C2521E |
| SHA-1 | 477CAFE8EBB40D5AD85616EF7B1FF452595D7985 |
| SHA-256 | 66BFAF7AAF493B41653058D5C38F599726711482ECB959DC1DF9B071E0363075 |
| SSDEEP | 48:XsFD4oo6gjU+604JXkaCL+C5j2rtrsthF2t3WRl:c1BgghJJXozF2hrsp2WD |
| TLSH | T11F3109C42A92C034BCE0E7394EE2460514FA7197C447B695BE034E1BBC6996FD84C441 |