| Key | Value | 
|---|---|
| FileSize | 180542 | 
| MD5 | CB4F91C7B2C5458DE90B9322461AC740 | 
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". | 
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> | 
| PackageName | auditd | 
| PackageSection | admin | 
| PackageVersion | 1:2.3.2-2ubuntu1 | 
| SHA-1 | 8AFFFCA774584B20EB74BBE95059CB1240200E83 | 
| SHA-256 | 50573E1E2FD6B38E029BDBDBB67008B45F889B67287D1C3C0DC3EDB76F8AE590 | 
| hashlookup:children-total | 45 | 
| hashlookup:trust | 50 | 
The searched file hash includes 45 children files known and seen by metalookup. A sample is included below:
| Key | Value | 
|---|---|
| FileName | ./usr/share/man/man8/auditd.8.gz | 
| FileSize | 1391 | 
| MD5 | 637AD5E61A2DFDB9A0A5BB64CF762B89 | 
| SHA-1 | 0E8B624F2D93D8125905035DD3B3C94EBF319409 | 
| SHA-256 | E3BBC09D23C7CCD5ECC558DF9A08CCC000645502D0AF52F14A36A91060128955 | 
| SSDEEP | 24:XEmvLYgLgRQeEKUmFbnCqnhSy1Q7i/eRwNTtBpmOf8cB5RyHiS5sFnz1oc:XtYgLgR6Z8b/nhSy1Q8eUxBszm7 | 
| TLSH | T1D621D68C70A1E3FB801AE5C04514D1FF2B0DBB502421F4B89B5977CABA573D5A80979A | 
| Key | Value | 
|---|---|
| FileName | ./usr/share/doc/auditd/examples/nispom.rules.gz | 
| FileSize | 1699 | 
| MD5 | 5A3E0FD09C3B4738C8DE77C8F71F421E | 
| SHA-1 | 222ED9ED3F4737FE85A52E77533B7E17FF286761 | 
| SHA-256 | D094A989F13E5244DAE49421C361F67789B1C1A23FCCABE611C39DBB23931EA4 | 
| SSDEEP | 48:X16nXcyLrshZ9n1ndEDaP9nkCtysk8clj6+C:F8Xc+rg7n1ndRlNyZRc | 
| TLSH | T16631F8619680096926A0755FF5036F201644330CE6803BA57C2BDABBB22FE226B98A34 | 
| Key | Value | 
|---|---|
| CRC32 | 9B2DA067 | 
| FileName | ./usr/share/man/man8/audispd.8.gz | 
| FileSize | 1159 | 
| MD5 | 135BB7129C559DBFDA3D7DB7C4F119C7 | 
| OpSystemCode | 362 | 
| ProductCode | 183711 | 
| RDS:package_id | 222721 | 
| SHA-1 | 2303B4F9ED81D8A3970B9F5236A990B86F91AC88 | 
| SHA-256 | A472521EACF96BAFF706D46B0BF46FBDC6FAEA3530B0990E1BC5E05CB1FC73E6 | 
| SSDEEP | 24:XuGxmtghkwHrEkYNBBZfiAc47XEf6AlOC6NCGW/NEjOyq05L0Xn7VJ:XuwFhk3vjoC61OC6cGGEVDwXn7VJ | 
| SpecialCode | |
| TLSH | T1C321CA417E287187A971F41256C3544123042C5B07F9745EF7FF857F51280DA879DB52 | 
| db | nsrl_modern_rds | 
| insert-timestamp | 1727040854.401868 | 
| source | RDS.db | 
| Key | Value | 
|---|---|
| CRC32 | 1C124E86 | 
| FileName | ./etc/audisp/plugins.d/af_unix.conf | 
| FileSize | 358 | 
| MD5 | 199EAA1E43FA9139F0910BDB64FD219E | 
| OpSystemCode | 362 | 
| ProductCode | 214118 | 
| RDS:package_id | 222721 | 
| SHA-1 | 31F906A6E55C835D5A14D241D88580FBCF7F7422 | 
| SHA-256 | B7C3E851E8901BC6B2895A6BE8ABE38887EA4BF8BCC9BF2699BF940C7974B567 | 
| SSDEEP | 6:mV7+QIKRcGreM2K/jcAu4YcqMqMoaeGiXCR2SFhGi+g4VxZUjkeIPTgnHtVbK/3:mFAKR3reMlcAhYc+MpeGiSRBQ/g414RS | 
| SpecialCode | |
| TLSH | T16BE068A2E9A03A2538E80B11AFAD83A5FC2596C97B380017282E2C2041029209263EEC | 
| db | nsrl_modern_rds | 
| insert-timestamp | 1727040613.7428613 | 
| source | RDS.db | 
| tar:gname | root | 
| tar:uname | root | 
| Key | Value | 
|---|---|
| FileName | ./sbin/aureport | 
| FileSize | 88808 | 
| MD5 | 51CA088D6F3DB8378E4D85067C64F5C2 | 
| SHA-1 | 3F2FAC8982CA449F5990E8774B1C67BC378F9966 | 
| SHA-256 | 475E71560A4194546FC262077E88B2768F7E4A41FFA8F08A429CDA35176BB29B | 
| SSDEEP | 1536:xyeo2sJLPLKiDqHXqWjHR67tvuRyzK3dn:xq1PLK/hHY7xs3d | 
| TLSH | T153932A2777A688BDC191C2304A9B5673A9B3F4789331B67E29809F303E06F550F5EA30 | 
| Key | Value | 
|---|---|
| FileName | ./sbin/audispd | 
| FileSize | 47192 | 
| MD5 | C70B8A539CA5A73926F5AE1B3C24ACA4 | 
| SHA-1 | 441F268D0CE2D91A9CB7A0F6BFB30002CC0C2EF5 | 
| SHA-256 | C96B14A6FAA583A22E1D0D3AE042C78EB6F46E11AB1BDD4201ED6F80ADFDFEF9 | 
| SSDEEP | 768:YAz5C5gkHLVeYO6YgK3tck/2TmnrPG+qlL5l1:YXHL0YOWwck/CmnC+2V | 
| TLSH | T196231A59F9A299BEC4F4C730819B8231A974B0949331A93F37059B783A52F300F5FA79 | 
| Key | Value | 
|---|---|
| FileName | ./usr/bin/aulastlog | 
| FileSize | 10544 | 
| MD5 | 2DAB2A496D1754FA44B307324451BF18 | 
| SHA-1 | 457FD834D7C023F8D24ABC4FDB521D9DE66273DB | 
| SHA-256 | 31097957D7AABEDDA8187A9F8A4CFD9D45ACB1C6ECF276233B4F6CC1D1C69FC1 | 
| SSDEEP | 96:GHTZYZB6WBpKE8tnNObfG8T83CqJeDDXdvTrKDaTEaF/1eu/SbOum5Y:GHGZoWzKEANO7ueD7ZKDG//AUS | 
| TLSH | T1C622B50BF6A3473FC5A4473545A75A306633E534DB10673B3918A075BFA1B980F2FA29 | 
| Key | Value | 
|---|---|
| CRC32 | 1EC45F21 | 
| FileName | ./usr/share/doc/auditd/examples/auditd.cron | 
| FileSize | 271 | 
| MD5 | 38EABF76CB16946B506A2FE853DE2863 | 
| OpSystemCode | 362 | 
| ProductCode | 214118 | 
| RDS:package_id | 222721 | 
| SHA-1 | 45BCD14824122202B143E78E59533968C933A5B5 | 
| SHA-256 | 8655D58E59EB7420D5182AA76017DAF40452EBABC1A5131DE0A7320AEEEE2368 | 
| SSDEEP | 6:hhRGk+O8cOBFsNRY+sgkldrn1vsYCs6ZZA49jsfBrvOFqfn:tGkgNo6gkv5sYr6ZZbpLFqfn | 
| SpecialCode | |
| TLSH | T19ED0C203290858300B1503A34A42696210A8104E3E37F06425EE275DFA93ADFB0C775E | 
| db | nsrl_modern_rds | 
| insert-timestamp | 1727040704.3995628 | 
| source | RDS.db | 
| Key | Value | 
|---|---|
| FileName | ./usr/share/doc/auditd/examples/capp.rules.gz | 
| FileSize | 2699 | 
| MD5 | A0E8E6264E13D7C097F2B6AA5D7D08F3 | 
| SHA-1 | 47CB42967DAD0B4013EAC89CC5B3DEABE1857B29 | 
| SHA-256 | ECDFC8CBA866449F7DF206FE37A089A4D0DF7EB5F0BF642E00C5C2112990BE7F | 
| SSDEEP | 48:XbLqlg0PhTy8QtmWrinTsWef+Iz1DMMMWgLdh8pKqxkdFosiH8ln:LBC6tmWridv61o2oX8RxkjFl | 
| TLSH | T19B514CBD9269D5E78C3867879201BF086DE0154F37C3EDE54504E432C308E6F4996079 | 
| Key | Value | 
|---|---|
| CRC32 | 58D6D6CB | 
| FileName | ./etc/audit/auditd.conf | 
| FileSize | 701 | 
| MD5 | E1886162554C18906DF2ECD258AA4794 | 
| OpSystemCode | 362 | 
| ProductCode | 183705 | 
| RDS:package_id | 222721 | 
| SHA-1 | 4960616B49F418D1DC7D7BC2161B400651FE754E | 
| SHA-256 | 60A95AF472143B3E3102EC784BBB0BBFB05EFA177BAC934806FA7EE46ACB17CA | 
| SSDEEP | 12:LzAKR4MoKK9M7tJS6hp2MEIZo7Q3j4HTXeOQ600tMSQrRBAgEvG2o3zpWpK/Kfrv:vK/6hp2MEI+Kj4HDjQ60KSjA0t/wv | 
| SpecialCode | |
| TLSH | T10501F4AC55E8F9A65077DAC2E097418F01797418345815213A1FF465FABCC90DB83650 | 
| db | nsrl_modern_rds | 
| insert-timestamp | 1727040614.798482 | 
| source | RDS.db |