Key | Value |
---|---|
FileSize | 204888 |
MD5 | C29436A230C6B34C0FB3FD93175ED652 |
PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
PackageMaintainer | Laurent Bigonville <bigon@debian.org> |
PackageName | auditd |
PackageSection | admin |
PackageVersion | 1:3.0.7-1.1+b3 |
SHA-1 | 227303DED78B036E8F6DD1B8648453FB0CA05DCF |
SHA-256 | 57830088E20C4D5E1AC2B1F4F35136CBA42DDAA904C77B9FC7BB9C50F5BD4F46 |
hashlookup:children-total | 78 |
hashlookup:trust | 50 |
The searched file hash includes 78 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | usr/share/audit-rules/30-ospp-v42-2-modify-success.rules |
FileSize | 826 |
MD5 | F583259AD73E913DB48A76E8A0C24863 |
RDS:package_id | 294718 |
SHA-1 | 0035557B33B9BBB564FB1DE550BA031D49C37F30 |
SHA-256 | CAEB9A7F4BB77AB89027F11789E02EB6E9B4F2FC4346EEAEA25EFE1730D83FE6 |
SSDEEP | 12:j3toeuFecEIWyb0FeVEIWyb0FecwIwWyb0FeVwIwWyb0FeHAWyb0Fe3MAWybE:j2gczWKVzWKcwLWKVwLWKgWK3rWT |
TLSH | T15001D29342B430F05F6B43A3C864DEB83405471E93635DC5D186E9D9DD1943ABEC390E |
insert-timestamp | 1696439445.0774827 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/bin/aulastlog |
FileSize | 67664 |
MD5 | 4BE37F804D5BA21D76B87FEC3D4122E4 |
SHA-1 | 062872F9823A7C478A359090E9EA085B88244C51 |
SHA-256 | 88F5DBEB492E7B713FF035234BB2ECB17A37FDFE4E4C1FE0CF322CAB176C0A84 |
SSDEEP | 192:nI/SwrQRw5we1Cbx5MmaUuoDcIjTZWKD7IN/sj8ok/:nIrew5we1Cd5hQoYIjmN/J/ |
TLSH | T18C63FF15F709996FC0D0863889E747B07333F10AD35267937728926DBF4A7AA4F226C8 |
Key | Value |
---|---|
FileName | ./usr/share/man/man5/auditd.conf.5.gz |
FileSize | 6841 |
MD5 | 4C995396A9EBEE5CEC1138CABCCB51D6 |
RDS:package_id | 293683 |
SHA-1 | 0BD56CF325A3242B111927850AE6E10D2A4F6D0F |
SHA-256 | 902053BBF311B19370F1DCDECD18E5E887882CFE3A2C1FD862926035349EFEA3 |
SSDEEP | 192:AhecJQoNLg1B16bR1ZSZNBZGn53ZPqJIJC:yFJtLMq/ZUbm3ZyJIM |
TLSH | T181E18E0014841B3BFE0E4BD9E882F338E69D98CBD407727F2A50277516676149F7E1A8 |
insert-timestamp | 1678953074.8046045 |
source | RDS.db |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/bin/aulast |
FileSize | 67664 |
MD5 | 327205E32C94BD0D9915EA02A08A6557 |
SHA-1 | 0C305E6432CF8EC61513516F3788AA9F5F542C58 |
SHA-256 | 07652FF6631D18F76BF5D55D3B45A5368914555C31D541826706E18C72F0B768 |
SSDEEP | 384:4gLIpAulMKgQ4/+lsjStJrA4WqgfBrQlej/et1pZu:46IpAulMKx4/+lsjSPE4sBrwejWt1Hu |
TLSH | T1D963A75BFB0DE82BC085477D498993B47332786DA30643D73A04A55C7A8A6DF8E3768C |
Key | Value |
---|---|
FileName | ./usr/bin/auvirt |
FileSize | 67744 |
MD5 | E1D47E6788FC99A6236E57263B3DF06B |
SHA-1 | 0D8CDB40FD8DFA36159CB0B06994C4E7DE08D32E |
SHA-256 | 5FEFBAD2F3FBAEED2350D6054670C8E6D936490993CC61AF0BB3E6F3D79274CD |
SSDEEP | 1536:4R6BYPe1bZAnGNk7KBYv+176BIGtkbqBlFmQ162:gfFmQY2 |
TLSH | T10F6328ADF78D6017E487437CA6C95690B332A48DD393C3E2790D4B1E5A4E39E4DB528C |
Key | Value |
---|---|
FileName | ./usr/share/audit/sample-rules/30-pci-dss-v31.rules |
FileSize | 6179 |
MD5 | 70B8DE2048C6B44A784AB221B95BA995 |
RDS:package_id | 293704 |
SHA-1 | 129423A508685ECE22A9EB155D9A0150EEF0FD82 |
SHA-256 | A6D974558DAE7B6D24EDF083A0D72BB8D15AC463DA0717FCD854235168390033 |
SSDEEP | 192:KGct29tkiKacQHguhLCZ0/XKANc4cIiKy2/P:KGcw9zcQH3SGhiF2/P |
TLSH | T149D13157636927319D1743E3EA5CB2EAE718809D3336B4EC4184A079EC6643A63E371E |
insert-timestamp | 1678960636.6124964 |
source | RDS.db |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | usr/share/audit-rules/README-rules |
FileSize | 1421 |
MD5 | 6405EBAE48BB89AF7FF7DF3385F1448E |
RDS:package_id | 294718 |
SHA-1 | 148ACBDD22A8BF666CA5A3E284E4AC9EBF910926 |
SHA-256 | 00E0926039F166A9F8D5B0B825E33358C7F2C1CCC6F86067BA2F684C26D13F95 |
SSDEEP | 24:zPopzNwKFwInXYhOOayvCEAqH/JuNLcoY1awOdzXxLmEZ:UxFJXYhfLAC7ONXxLZ |
TLSH | T125210F1B67899B2A408333DAFECE12D9AF1581BD5368A530549F001EBE5177915F39D0 |
insert-timestamp | 1696439444.1184876 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | usr/share/audit-rules/30-ospp-v42-3-access-failed.rules |
FileSize | 625 |
MD5 | 852D1A243E59DD5961F3D9F5C5592BAC |
RDS:package_id | 294718 |
SHA-1 | 149781B05552A0CDA6C6159984F21EE76540A154 |
SHA-256 | 74AA84E36882DD5F1BC4F1953B938FC6425A00D28D0C36232B16A5AEADC7B413 |
SSDEEP | 12:jEttqOQYENLFecOr9DeFeVOr9DeFecOm9DeFeVOm9D+:jkqO3JcOr9nVOr9ncOm9nVOm9K |
TLSH | T1BEF096DFC33434744A0A179789B54FBDF808511D533359CAC68416C1FE514B52AC2EAD |
insert-timestamp | 1696439445.0373838 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
CRC32 | 1770520E |
FileName | usr/share/audit-rules/10-base-config.rules |
FileSize | 244 |
MD5 | DEF45A38095C1C16EA919317B8020A83 |
OpSystemCode | 362 |
ProductCode | 214118 |
RDS:package_id | 294718 |
SHA-1 | 17C157514A3D87C906A6C830DF30C7FF3966C798 |
SHA-256 | 54C2CEBDAADFB928F7327CC066218E38743F0FF94D02FE162A7A415E148D23A8 |
SSDEEP | 6:jO2/q9RjRiNChQYF9FxNVYKAtOFPQYmFnNGd:jOuqHIQGYF9Lx+OQBgd |
SpecialCode | |
TLSH | T117D0A72D87B4B571095E03DF6A4673F39E6D214DA5603019208F683B458739FC53BA92 |
db | nsrl_modern_rds |
insert-timestamp | 1696439445.5309117 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/doc/auditd/README.Debian |
FileSize | 762 |
MD5 | B3227334EE362039157636427817912B |
SHA-1 | 1F16E2C6AF3B44FF3BBCA62804A4CEFB56111887 |
SHA-256 | 3FC3C889319C32A4CF030D58687C4E9F9AEA049F7E097028059406F397EB69A8 |
SSDEEP | 12:3+PQ8EXgb3jLUXJNFB4h6A+ysf2HCY2NO8J8BCQk6PfGWRVGWRROxnJYzGLun:3kEXgfgXJpPA+yTHCY201Xk6Wf+WJYzH |
TLSH | T1D50128273E80D7765640F0B1FD5A61D1DA2A34A833043074259DA10FE99552A93FDF76 |