| Key | Value |
|---|---|
| FileSize | 361712 |
| MD5 | 387971D2180989D2FB83576EE923A73E |
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
| PackageMaintainer | Ubuntu MOTU Developers <ubuntu-motu@lists.ubuntu.com> |
| PackageName | auditd |
| PackageSection | admin |
| PackageVersion | 1.7.11-1ubuntu1 |
| SHA-1 | 33ABE4B3710B2B8A467FDE23A8E015A9D292BDA3 |
| SHA-256 | 6E08478D07EBC10CA323C12F7F8DA08E4336D528A5662C1B85F7CA14FEA3E26B |
| hashlookup:children-total | 39 |
| hashlookup:trust | 50 |
The searched file hash includes 39 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/TODO |
| FileSize | 3313 |
| MD5 | E50F9A20FBC5DF2F9A6F1A858DF5291D |
| SHA-1 | 0756E7F446814CA89B25594BABD87EF75F0CA6D4 |
| SHA-256 | C6D5F09D4CCB6601E23293DB8AEEE914366B2705EC19AF333E884082DABE4A32 |
| SSDEEP | 48:5SJVS+WvVMS0xPrjhfy1tdZBIZgaAuv/2YaktDxntoCNLv:4TS+WvWS0xpy1bT2RBLRttmqLv |
| TLSH | T1EF618537690D11262CD153F2A31228A3B31EC2DE971C5E7EE0BED3066B4E6B4517E288 |
| Key | Value |
|---|---|
| FileName | ./sbin/auditctl |
| FileSize | 117672 |
| MD5 | 0D227323039259ABEF4159302FB7544F |
| SHA-1 | 0A0C911D8DA1AC76D70B8B8A35FCB3BE10ADA359 |
| SHA-256 | 42BFDD86BBFF1D3C8BC295F560F28E745E3A8DCB3572F6FBAA0024C381889CA6 |
| SSDEEP | 3072:kGH9SDeUOuDrAkIBSIvRHewQr921UJ4a4buXX:1UO4r7lIvRHewG9+aGuXX |
| TLSH | T1B2B32901A771832AC5D80136ECE39B527375AE855204C3077C5EB96D1FBB1F0BAD66C9 |
| Key | Value |
|---|---|
| FileName | auditd.conf |
| FileSize | 680 |
| MD5 | 664D289B80288D1E182C4FB194757817 |
| RDS:package_id | 187003 |
| SHA-1 | 11661A65CC18B21752E765B7A00266E43F298831 |
| SHA-256 | 109F9B40FE3BA12B1666C34B83690C93C211559E60ECC45D449FB559D556C90B |
| SSDEEP | 12:LzAKR4MoKK9M7tJSPhp2MEIZoQxQ3j4HTXeOQ600tMSQrRBAVo3zpWpK/Kfrv:vK/Php2MEIrKj4HDjQ60KSjA0t/wv |
| TLSH | T1AB01FEA855E8F9A6907BEAC2E093018F0179B418305826213A1FF429FABCC809B83650 |
| insert-timestamp | 1679424419.4797292 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | aulastlog.8.gz |
| FileSize | 417 |
| MD5 | 74AB7532805F1A72BF1A3D90546D822C |
| RDS:package_id | 187003 |
| SHA-1 | 225238500409B90989A70AB59CC979D536E0EE44 |
| SHA-256 | 3BCC8A3B107509342638543370DCBE5C9D5FC65FF17AA106CD1E164EEA8543D7 |
| SSDEEP | 12:XhVhQbdfovxT1/xSP5+WSjC10YK8csK57Srnf/:X9Qb0xZ/xG5+WSmib8u7SDf/ |
| TLSH | T13CE0A3398C4A14C5EB61393114E492ECD59B007C52614340D53DE1E8415E5221A86A5D |
| insert-timestamp | 1679424419.2331285 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/bin/aulastlog |
| FileSize | 9892 |
| MD5 | 57DCB29ADDF635E94B425FD5B31801D1 |
| SHA-1 | 23D5BA68A11BDEF85A4BCA760295AAEBE0BAAF80 |
| SHA-256 | 865AC020F1B29094B4C4ECAFE3D07ADE970929ED11E7D4317D4950D948F0F3D0 |
| SSDEEP | 96:0LB82qpNcLw9DXG5pFtEjvOLnaZsRic/UCGhs+HSIjGSaWDDrsKDBTQKquumVX9s:0uV/1W5p7E7Fc/UC2fHF6qD0KDBrqARU |
| TLSH | T114126113A3EB9927C4A01733D497532673A88BD19794871F7A0D186B2FC1B0A2E773D8 |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/ausearch.8.gz |
| FileSize | 3018 |
| MD5 | 6B16B8BC0777A3EA21ED436F03EB58D5 |
| SHA-1 | 2736C527AE4D5F7D7E736A944DB33C380CBE83FE |
| SHA-256 | CA6E328E7757DB97C4BB930F3BF0B251728002640434B687D20126EC3CFBBA69 |
| SSDEEP | 48:XU7RD6aiN3nSi5GMntByjNbdY+exk4l11PPdDW6sygvK9rRzS1nTdn:ema03nSwXpfx/11XxWndtB |
| TLSH | T1D6515C2A1B14516AECA6B279D7E74DC6ACC10ED210EC3E813B19E99A98570F97106888 |
| Key | Value |
|---|---|
| CRC32 | 1DD87932 |
| FileName | af_unix.conf |
| FileSize | 359 |
| MD5 | 64E9C248CED25E16B59769E716688CA6 |
| OpSystemCode | 362 |
| ProductCode | 14897 |
| RDS:package_id | 187003 |
| SHA-1 | 3EFACF98091DCAB57CE4CF0CD9811B94F978EE92 |
| SHA-256 | E24AF7D6260E9AF4EA2CD39E728691BAD4EDA8FF342310A9E4FD80CF73A92412 |
| SSDEEP | 6:mV7+QIKRcGreM2K/jcAu4YcqMqMoaeGiXCR2SFhGi+g4VxZ/dMYeIPTgnHtVbK/3:mFAKR3reMlcAhYc+MpeGiSRBQ/g41/db |
| SpecialCode | |
| TLSH | T134E061A2D5A03A2538E80B11AB5D8295FC2596C83B340017282D3C1001039209263EDC |
| db | nsrl_modern_rds |
| insert-timestamp | 1679424419.464056 |
| source | RDS.db |
| Key | Value |
|---|---|
| CRC32 | 1EC45F21 |
| FileName | ./usr/share/doc/auditd/examples/auditd.cron |
| FileSize | 271 |
| MD5 | 38EABF76CB16946B506A2FE853DE2863 |
| OpSystemCode | 362 |
| ProductCode | 214118 |
| RDS:package_id | 222721 |
| SHA-1 | 45BCD14824122202B143E78E59533968C933A5B5 |
| SHA-256 | 8655D58E59EB7420D5182AA76017DAF40452EBABC1A5131DE0A7320AEEEE2368 |
| SSDEEP | 6:hhRGk+O8cOBFsNRY+sgkldrn1vsYCs6ZZA49jsfBrvOFqfn:tGkgNo6gkv5sYr6ZZbpLFqfn |
| SpecialCode | |
| TLSH | T19ED0C203290858300B1503A34A42696210A8104E3E37F06425EE275DFA93ADFB0C775E |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040704.3995628 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/examples/capp.rules.gz |
| FileSize | 2474 |
| MD5 | 6700CDA50BB931A1EFF70189E66679DC |
| SHA-1 | 4E37510545D0620BE5895D768831D4AAD86EC94D |
| SHA-256 | 009B8F358CB6B60773554650F6039C985FBB2C80DF1AACA4E9E52C35DFB80F1B |
| SSDEEP | 48:XEMecS6XSuWOuxPZrUGyvoBdcpvc3A9uwja7TYiBwO15cYOIjlsHh4TVf:UMJS6XSuWOTGyv22uwja5wO1JObST1 |
| TLSH | T15C510A90F0552D56B5E449BED73F9CA0C2AD87E288D0A2421F02E0D2F4D36CEB4552BC |
| Key | Value |
|---|---|
| FileName | ./sbin/ausearch |
| FileSize | 150620 |
| MD5 | 4EDAFB0D39C728B4112EDED2B73CD538 |
| SHA-1 | 51A5F1B3EFD21D034B12EA04385E73E99BB3E0B9 |
| SHA-256 | FEE8B7A2A65EA5A0E9D190CFF24BF8D2C708F93CB59F43642AB5CCE95F040CA2 |
| SSDEEP | 3072:nmCwIAU7EgAEIjSQhwK750IIvRHewQr921UJ4a4bU:mCwnDO8975rIvRHewG9+aGU |
| TLSH | T10DE36D1267B64727C4D44233DCE39722B3B4AEC01120D31A6C697D6E2D791B4BBEA7C9 |