| Key | Value |
|---|---|
| FileSize | 207652 |
| MD5 | 7E7E2177D4B7F019A4A41B3A7E1DF76A |
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
| PackageMaintainer | Laurent Bigonville <bigon@debian.org> |
| PackageName | auditd |
| PackageSection | admin |
| PackageVersion | 1:3.0.6-1 |
| SHA-1 | 19E4924303B2A0EA3CCD663208E7ADED7E223B15 |
| SHA-256 | E309AB83F208C9D3303E86467C147A0115EA06CC8EC5B80A5309642D1E542EA6 |
| hashlookup:children-total | 77 |
| hashlookup:trust | 50 |
The searched file hash includes 77 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | usr/share/audit-rules/30-ospp-v42-2-modify-success.rules |
| FileSize | 826 |
| MD5 | F583259AD73E913DB48A76E8A0C24863 |
| RDS:package_id | 294718 |
| SHA-1 | 0035557B33B9BBB564FB1DE550BA031D49C37F30 |
| SHA-256 | CAEB9A7F4BB77AB89027F11789E02EB6E9B4F2FC4346EEAEA25EFE1730D83FE6 |
| SSDEEP | 12:j3toeuFecEIWyb0FeVEIWyb0FecwIwWyb0FeVwIwWyb0FeHAWyb0Fe3MAWybE:j2gczWKVzWKcwLWKVwLWKgWK3rWT |
| TLSH | T15001D29342B430F05F6B43A3C864DEB83405471E93635DC5D186E9D9DD1943ABEC390E |
| insert-timestamp | 1696439445.0774827 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man5/auditd.conf.5.gz |
| FileSize | 6841 |
| MD5 | 4C995396A9EBEE5CEC1138CABCCB51D6 |
| RDS:package_id | 293683 |
| SHA-1 | 0BD56CF325A3242B111927850AE6E10D2A4F6D0F |
| SHA-256 | 902053BBF311B19370F1DCDECD18E5E887882CFE3A2C1FD862926035349EFEA3 |
| SSDEEP | 192:AhecJQoNLg1B16bR1ZSZNBZGn53ZPqJIJC:yFJtLMq/ZUbm3ZyJIM |
| TLSH | T181E18E0014841B3BFE0E4BD9E882F338E69D98CBD407727F2A50277516676149F7E1A8 |
| insert-timestamp | 1678953074.8046045 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/lintian/overrides/auditd |
| FileSize | 1103 |
| MD5 | 5B9BEFAB757AFF091EFCB038F1DDAB72 |
| SHA-1 | 0FB0DA366E034A7DB169EA52121E86AF17C76F7D |
| SHA-256 | 4FCFE060F44CE192B87AB55B869336FA262C0AE7BC41705A4C8B5FF586B83617 |
| SSDEEP | 24:jteVnW+lMjw2SufsSufU4SuP4QSkBYcg8LzgLa2Lam7+FLm7N4m7aJLm7auLm7jM:QVvMUsf6fU2P48zzma0V7+F67N/7aJ6Z |
| TLSH | T12C11A7E7A26376B8179798B1FA7BEEA0565BB180BAB40088B11FFB47C14011E4174F23 |
| Key | Value |
|---|---|
| FileName | ./usr/share/audit/sample-rules/30-pci-dss-v31.rules |
| FileSize | 6179 |
| MD5 | 70B8DE2048C6B44A784AB221B95BA995 |
| RDS:package_id | 293704 |
| SHA-1 | 129423A508685ECE22A9EB155D9A0150EEF0FD82 |
| SHA-256 | A6D974558DAE7B6D24EDF083A0D72BB8D15AC463DA0717FCD854235168390033 |
| SSDEEP | 192:KGct29tkiKacQHguhLCZ0/XKANc4cIiKy2/P:KGcw9zcQH3SGhiF2/P |
| TLSH | T149D13157636927319D1743E3EA5CB2EAE718809D3336B4EC4184A079EC6643A63E371E |
| insert-timestamp | 1678960636.6124964 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | usr/share/audit-rules/README-rules |
| FileSize | 1421 |
| MD5 | 6405EBAE48BB89AF7FF7DF3385F1448E |
| RDS:package_id | 294718 |
| SHA-1 | 148ACBDD22A8BF666CA5A3E284E4AC9EBF910926 |
| SHA-256 | 00E0926039F166A9F8D5B0B825E33358C7F2C1CCC6F86067BA2F684C26D13F95 |
| SSDEEP | 24:zPopzNwKFwInXYhOOayvCEAqH/JuNLcoY1awOdzXxLmEZ:UxFJXYhfLAC7ONXxLZ |
| TLSH | T125210F1B67899B2A408333DAFECE12D9AF1581BD5368A530549F001EBE5177915F39D0 |
| insert-timestamp | 1696439444.1184876 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| CRC32 | 1770520E |
| FileName | usr/share/audit-rules/10-base-config.rules |
| FileSize | 244 |
| MD5 | DEF45A38095C1C16EA919317B8020A83 |
| OpSystemCode | 362 |
| ProductCode | 214118 |
| RDS:package_id | 294718 |
| SHA-1 | 17C157514A3D87C906A6C830DF30C7FF3966C798 |
| SHA-256 | 54C2CEBDAADFB928F7327CC066218E38743F0FF94D02FE162A7A415E148D23A8 |
| SSDEEP | 6:jO2/q9RjRiNChQYF9FxNVYKAtOFPQYmFnNGd:jOuqHIQGYF9Lx+OQBgd |
| SpecialCode | |
| TLSH | T117D0A72D87B4B571095E03DF6A4673F39E6D214DA5603019208F683B458739FC53BA92 |
| db | nsrl_modern_rds |
| insert-timestamp | 1696439445.5309117 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./sbin/audisp-syslog |
| FileSize | 14564 |
| MD5 | 22BAC925EE4EF78B55AA73E66B73EEFA |
| SHA-1 | 1E625928B231BF9D93CEF1477664E93FF61B8199 |
| SHA-256 | F90087E126EA4F5B65359A9BD5458283F5E898EA23F2294D956D82E8F7FB0424 |
| SSDEEP | 384:+8hQfDjhY5viatj+bln8oCeWFGOs5SHAF2jgFeSaApA9I1r4WXDLA:HcDFY5viaV+bln8oCeWFGOs5SHAF2jg6 |
| TLSH | T1A7629526FF446EFBC4DACE30451B8343D2BECD4CE296A327910DC9442943A965D93ACD |
| Key | Value |
|---|---|
| FileName | ./sbin/ausearch |
| FileSize | 138824 |
| MD5 | 6B9BE524A3E60A26C04AB20BB791B77B |
| SHA-1 | 1EFB9AEC8D7F7494E1A3AD56D1F686D2431C9272 |
| SHA-256 | C191329070F754C730047E83D0566429280EE4869F2C0CA755761102317573F4 |
| SSDEEP | 3072:DU08m8dQad9Z8QDziPOpG+vABKktfZ7i1NsVTr/29:DU08m8qJQD6IAAktfZ7i1NsJr/2 |
| TLSH | T1AAD3E802AB006FF7C4C7CC35592D939219FEEC9B639CB76AB868C9493E0195A7D930D4 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/README.Debian |
| FileSize | 762 |
| MD5 | B3227334EE362039157636427817912B |
| SHA-1 | 1F16E2C6AF3B44FF3BBCA62804A4CEFB56111887 |
| SHA-256 | 3FC3C889319C32A4CF030D58687C4E9F9AEA049F7E097028059406F397EB69A8 |
| SSDEEP | 12:3+PQ8EXgb3jLUXJNFB4h6A+ysf2HCY2NO8J8BCQk6PfGWRVGWRROxnJYzGLun:3kEXgfgXJpPA+yTHCY201Xk6Wf+WJYzH |
| TLSH | T1D50128273E80D7765640F0B1FD5A61D1DA2A34A833043074259DA10FE99552A93FDF76 |
| Key | Value |
|---|---|
| FileName | ./etc/audit/auditd.conf |
| FileSize | 881 |
| MD5 | FCDA3BA8BA06665ED33396551B8AA8E4 |
| SHA-1 | 205CFC6E06A76ED481DD301955B1DC1E2388560E |
| SHA-256 | 9A17001171E39899E535173AB9044923FB155C9C9AFA2C8EB71EEF2DB757C883 |
| SSDEEP | 12:LzAKR4JZooKK9PGq6bEIo3ndI3Q3j4LXeOQ600tMSQOPUavAgEvG2o3XgpWpK/Kr:YCKJdI3Kj47jQ60KpUTRt/wZj7ovg71 |
| TLSH | T16B1123F850F9FE6654B6D541E1A3018F0378790C39451679BB16F814E9B9CD0AB43190 |