| Key | Value |
|---|---|
| FileSize | 194116 |
| MD5 | A866028A09A1F29DC15F8AE55768972C |
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | auditd |
| PackageSection | admin |
| PackageVersion | 1:2.3.7-1ubuntu1 |
| SHA-1 | 40A0E0FA8A21DB72CE54D98387162D7F2FD2AC07 |
| SHA-256 | 8CCD1B7246731D50506600A3290B3C5BFFF1E43624EF7255D521E067E1528656 |
| hashlookup:children-total | 45 |
| hashlookup:trust | 50 |
The searched file hash includes 45 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| CRC32 | 190661C4 |
| FileName | auditd.conf.5.gz |
| FileSize | 5179 |
| MD5 | E00697B2FA7AA2BE440CFC136DF2BE24 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| SHA-1 | 00EA0CE6163A5510BABC16C6469AB986475B6E58 |
| SHA-256 | CED4172C6365A1BB2679819F607963D7481932B567D145AFBF69137DC754B409 |
| SSDEEP | 96:GWNosY80NzlYsD1kI8ka4UJehqZbPt5DKQbm39fSLEpZOInR1LZ8EJsgt5/e:GE0NThkI8wUJwqZDRbotSLEpZOIDSEJQ |
| SpecialCode | |
| TLSH | T1C8B18EC05AA1525EA85831706B3740879D196E6DD3F5FCDB203AC17B694169039AAC02 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646978213.0425208 |
| source | NSRL |
| Key | Value |
|---|---|
| FileName | ./sbin/autrace |
| FileSize | 13884 |
| MD5 | 1EDADBBC5C31E7771E81C67335A346F7 |
| SHA-1 | 04273751F9CA0568020D6835E9E6A27BF468C69E |
| SHA-256 | A46CC2C4EE4B533F9A6CE75025BAC4D937F8000AC984CA76D5BD036D81869B6B |
| SSDEEP | 192:fcpoW7OaTENfPcDl3s3sKQA4/4lJUUMIst0GNxUe4Ss58og8Uq:fcROawh49scfVIqIst9xV4W7 |
| TLSH | T12352D5272642CDB1F0627339E84B663211728404DA5FFF437F0D65A95D4A6FABE13622 |
| Key | Value |
|---|---|
| FileName | ./usr/bin/aulastlog |
| FileSize | 9740 |
| MD5 | BF4FE3CC484BB97A5DE63C0277A10FCF |
| SHA-1 | 0F91BF2F61AF445A4A931CF05E15A3BB365F2929 |
| SHA-256 | BE8A3968AE0F7C191DE8E47B4A277699EEB5F10C8D3BCC238F052A7F48131462 |
| SSDEEP | 192:f/iGoWEKE6R2l6DLhArw3zG00RbKD2pAfftUN:f6Bd6S6h9iRpH |
| TLSH | T154129206F342C932D5620339841727656532C4119B43EFE3F69D43FA3EAA788DA17F22 |
| Key | Value |
|---|---|
| FileName | ./sbin/auditctl |
| FileSize | 38264 |
| MD5 | 6F26999D184A95065568D1B09E901268 |
| SHA-1 | 13025B21D6DFE37578222068CAA65FC59545F67F |
| SHA-256 | 538F0EFC3C7D38DE45A267210E764BE2D9C6C7C0917AD1CE5F0FCD5D04828D49 |
| SSDEEP | 768:GqaX8a5D4BXfTRlHCcGC1lHUOWC8PvOqJzc+qmIfR0GPhsTITcWr0:Gq8ktXGgRUbC+OqJzc+qj5NPhA8Vr |
| TLSH | T10803189BB7C2D8B0C4F354F0492B1A116D314843AAF7F292F24D334AB765A26FA56374 |
| Key | Value |
|---|---|
| CRC32 | 3A7069AE |
| FileName | auditctl.8.gz |
| FileSize | 6351 |
| MD5 | FFCC9DBB6C5A6565272F4A7106834F2D |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| SHA-1 | 1761F79316C20565273B2DF6D6A4E8673110F35A |
| SHA-256 | 7B8EC6F4A43B624EEF25858023A38774161DBA6032743ECA5BF35CBA405CB575 |
| SSDEEP | 192:VRFUGsXHN/OdcF8fUM99nq5Yx7z8uymeTPe9sHiol:VEdXN/JI19ICezPe9Fol |
| SpecialCode | |
| TLSH | T19FD1BE7E748840090656B255BA64E30DAF8D26A9300DA30D3AA2E1922BF121C6C9D0F7 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646986925.683344 |
| source | NSRL |
| Key | Value |
|---|---|
| CRC32 | 99CFA27F |
| FileName | auditd.8.gz |
| FileSize | 1499 |
| MD5 | 0089D3BC150AC16B1A266B3DA5C1AAB0 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| SHA-1 | 17DB586662FD048B6FD7C79486157F1EABBAEE37 |
| SHA-256 | F201EFF61418E00E62730E4F28B51360AE881100238D68FDB93460363A7E2CFC |
| SSDEEP | 24:X2bvJnp1yT8JGJObUxSA90t4mv9yrrFBC5SEd6ODC/YqIibXvCQU1TxRrxpnorns:Xkb4Sq0t4g9oa96cqIiDEtbDnors |
| SpecialCode | |
| TLSH | T1FA31E9E45815E1E0B3560B7C865D6E08C085931E14CEFA0A62AEE7D13A8F2B39791185 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646987135.8325508 |
| source | NSRL |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/examples/nispom.rules.gz |
| FileSize | 1699 |
| MD5 | 5A3E0FD09C3B4738C8DE77C8F71F421E |
| SHA-1 | 222ED9ED3F4737FE85A52E77533B7E17FF286761 |
| SHA-256 | D094A989F13E5244DAE49421C361F67789B1C1A23FCCABE611C39DBB23931EA4 |
| SSDEEP | 48:X16nXcyLrshZ9n1ndEDaP9nkCtysk8clj6+C:F8Xc+rg7n1ndRlNyZRc |
| TLSH | T16631F8619680096926A0755FF5036F201644330CE6803BA57C2BDABBB22FE226B98A34 |
| Key | Value |
|---|---|
| CRC32 | 9B2DA067 |
| FileName | ./usr/share/man/man8/audispd.8.gz |
| FileSize | 1159 |
| MD5 | 135BB7129C559DBFDA3D7DB7C4F119C7 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| RDS:package_id | 222721 |
| SHA-1 | 2303B4F9ED81D8A3970B9F5236A990B86F91AC88 |
| SHA-256 | A472521EACF96BAFF706D46B0BF46FBDC6FAEA3530B0990E1BC5E05CB1FC73E6 |
| SSDEEP | 24:XuGxmtghkwHrEkYNBBZfiAc47XEf6AlOC6NCGW/NEjOyq05L0Xn7VJ:XuwFhk3vjoC61OC6cGGEVDwXn7VJ |
| SpecialCode | |
| TLSH | T1C321CA417E287187A971F41256C3544123042C5B07F9745EF7FF857F51280DA879DB52 |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040854.401868 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/README.Debian |
| FileSize | 919 |
| MD5 | 71530E8E04634A023800D9FCFE478BC1 |
| RDS:package_id | 222721 |
| SHA-1 | 2BC8DF446CD0C850B8FFB11BC620BDB23B312E12 |
| SHA-256 | B207622700C8AB30D56D93BF40D42FD91180A8D8E726264F68B7ACDA09684E5D |
| SSDEEP | 24:3kEXgfgX6koVgF/pO+4TH2d9e1Y201n6Wflv3pGu:3k+ToWF/4+4Ltt41fp |
| TLSH | T1DD1199237E81DB264680F0A5FE572280DA2A30AC3309242420E9A0DFE94253A52FEF71 |
| insert-timestamp | 1727040704.3892922 |
| source | RDS.db |
| Key | Value |
|---|---|
| CRC32 | 1C124E86 |
| FileName | ./etc/audisp/plugins.d/af_unix.conf |
| FileSize | 358 |
| MD5 | 199EAA1E43FA9139F0910BDB64FD219E |
| OpSystemCode | 362 |
| ProductCode | 214118 |
| RDS:package_id | 222721 |
| SHA-1 | 31F906A6E55C835D5A14D241D88580FBCF7F7422 |
| SHA-256 | B7C3E851E8901BC6B2895A6BE8ABE38887EA4BF8BCC9BF2699BF940C7974B567 |
| SSDEEP | 6:mV7+QIKRcGreM2K/jcAu4YcqMqMoaeGiXCR2SFhGi+g4VxZUjkeIPTgnHtVbK/3:mFAKR3reMlcAhYc+MpeGiSRBQ/g414RS |
| SpecialCode | |
| TLSH | T16BE068A2E9A03A2538E80B11AFAD83A5FC2596C97B380017282E2C2041029209263EEC |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040613.7428613 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |