| Key | Value |
|---|---|
| FileSize | 59378 |
| MD5 | 15C9C9CB25AD0E1D355C200C94C28B88 |
| PackageDescription | Plugins for the audit event dispatcher The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines or analyze events for suspicious behavior. |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | audispd-plugins |
| PackageSection | admin |
| PackageVersion | 1.7.18-1ubuntu1 |
| SHA-1 | 8B23A8B2AC4A663651D64A0BF3230F34D4E115FE |
| SHA-256 | A250A5242EB2999533E17DB97832636192B1DE32AC2B5763622A4D2F00E8752C |
| hashlookup:children-total | 16 |
| hashlookup:trust | 50 |
The searched file hash includes 16 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| CRC32 | 41DA0A99 |
| FileName | ./etc/audisp/plugins.d/au-prelude.conf |
| FileSize | 280 |
| MD5 | FDBE0EAE23D0AB3963F81D4102E1CC4B |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| RDS:package_id | 182052 |
| SHA-1 | 25FE37B04A644C1438DD2B609C6190BAC368918F |
| SHA-256 | CD39364F42336B4A3D5F6E1B56216C4A28732FE90F633413CDC2617304EFA7E6 |
| SSDEEP | 6:mV7id4EjQEXsoA0EvdQj3KYAmJGp6LOjkeGNy9Vd1ZY:mF+JHvElyBPGfRWAVd1G |
| SpecialCode | |
| TLSH | T19AD0C2B121B4B27814093A413A8BC5E999BAB09656281415243D88A46126074E323B86 |
| db | nsrl_modern_rds |
| insert-timestamp | 1679426507.4377716 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./sbin/audispd-zos-remote |
| FileSize | 31408 |
| MD5 | 3236EC28326F5C4409DC1A379D6E6E12 |
| SHA-1 | 2ABAC8E89947A4837DA70D4BB21908BC04133047 |
| SHA-256 | 0B08B317409EC84D3A4CCA25AB02CAD09B2567A196BFFEA66D692085B3BCF27B |
| SSDEEP | 384:uLkrqKc4sCQKEPWvrZqmF/SecdkCEqjeOUTPZGfgfGBNq1PEJ:uLkeKcE5vrZqUcdk/q6VZGYcI1PE |
| TLSH | T195E2294FE281C6BAC4C4C270481B16316A7B7CB5FB32752B6944F7782CD27A45E1FA29 |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/audisp-prelude.8.gz |
| FileSize | 2098 |
| MD5 | 25CDF95AE8B866DC8F52212642FFE09A |
| SHA-1 | 2E6000C40A9E48FA9AEDC99615BC90CAF6F4B0CA |
| SHA-256 | 8218700D08B7F225D74B450808324ED5354191B9826F619E4C05F3A64125F664 |
| SSDEEP | 48:XirxpvPueVVpmgbQYQ71Z4oQb6FxmXqchhuPkxTJMgmZ5bKlcmg:axpuePpmuQYC1Z4tWFkXRFxFpEbKlcV |
| TLSH | T193411C5B194109A1DC43413C0D2D7C9DE4D55B466D496B872917D1FA53717CA53C9011 |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/audispd-zos-remote.8.gz |
| FileSize | 3810 |
| MD5 | 7E55F39A9CB9CBB7015C528056EB4938 |
| RDS:package_id | 182052 |
| SHA-1 | 359BAD44B01EE23C99AD3A381D3763338461D812 |
| SHA-256 | 4D928EC8EEB09FA3AACE085318915952FF4BF7AD287B803325D90C4BA34BF838 |
| SSDEEP | 96:PTHyWRUTUlfYgYb7dAyY77G6Nprzy1+mA:7tUTq+796NA17A |
| TLSH | T107717C27162AF3B1307B23BB80E9A73A006519B994FBC02938406CDD8879702F0D57BE |
| insert-timestamp | 1679426507.3935153 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| CRC32 | 88842C8A |
| FileName | ./etc/audisp/plugins.d/audispd-zos-remote.conf |
| FileSize | 436 |
| MD5 | BE9F4B5B737E467A8FF69348A83108E3 |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| RDS:package_id | 182052 |
| SHA-1 | 655063BC53686E399C1154FB82664812C1C188FF |
| SHA-256 | 85BF9CC51764A1EBA91D71BC62F291CD96708875FA364A81EB751148E9E8F3C0 |
| SSDEEP | 12:q0RofnEEgb3duRuRhK4xxi9h0cdYDMfM3aRWid1DfvKoaC:qYofnrgbRhKCi9h0uYdTid17bl |
| SpecialCode | |
| TLSH | T179E0ABF12AC53A630C3126008B9F70D8176BA3F2523E1445722BC6999AAE5A1C30B7D5 |
| db | nsrl_modern_rds |
| insert-timestamp | 1679426507.4327202 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | audisp-remote.8.gz |
| FileSize | 519 |
| MD5 | F15D6E07F0F684984E69D556A18E5764 |
| RDS:package_id | 187003 |
| SHA-1 | 69040374ED8DD93820D998564DF3AD0CBA71BB96 |
| SHA-256 | 542F3AAC19801E1480FA1FCB41E00CF52B9620DB549C038DDD2E855E9CFE2B7B |
| SSDEEP | 12:XZCNAHJc49m8PXJ44B/SgRKdoU+GhcA9dta08SEucll:XZCNtKmEJ4NgPULhcA9/OQUl |
| TLSH | T1E7F075D1043E26376F6D36E5104337A5E36334EDC538452E6CC81483C01CD1B039146F |
| insert-timestamp | 1679424419.5313194 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./etc/audisp/audisp-remote.conf |
| FileSize | 620 |
| MD5 | 814B4E51DF97210ABE9210FB9746CABB |
| SHA-1 | 699DAD59BE90B1E52591DFA17E92EDB0C0100F63 |
| SHA-256 | 20F60167A809C88A7D6D9B0EA2BAB819800BBAB41151BCEE37484F68A961575F |
| SSDEEP | 12:LzAKRDoWZ3wPHt073ebRFRReF/YqXEfv+BkwBZHmdEmMDKAJjlKLHHppWpK/KoiG:1onP+Deb29103+mwb+6FUzHpt/bX |
| TLSH | T188F0DD7861FB3D3B0CB2668EFA61BA4207B96001749C00403747C5AC1DAE4F4C717461 |
| Key | Value |
|---|---|
| CRC32 | 9DA9B2A7 |
| FileName | ./etc/audit/zos-remote.conf |
| FileSize | 246 |
| MD5 | 871BBE04101FF19CF1BAA0DD300C76EC |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| RDS:package_id | 182052 |
| SHA-1 | 6FE4675388A81688FCE3618EEB16B331155DF1CE |
| SHA-256 | 392EF562F7CD7F6A1D474A506C32AD4B9171926A89E9D3BD90F6B420B9847A72 |
| SSDEEP | 6:jLVYQIRQFaH42kQ6VyK7naKQ8JRDEFGMKL3TJyMLEdNj5L/SiXykfXv:jLERTZ6sSaKlvE8HJyMGNtL6iXPfXv |
| SpecialCode | |
| TLSH | T168D0979108C72DF3206607CB022630D0130CA390073F00422D22E70F5F3FA9783172EA |
| db | nsrl_modern_rds |
| insert-timestamp | 1679426507.4216154 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./etc/audisp/audisp-prelude.conf |
| FileSize | 1107 |
| MD5 | 9A93E5FE9DC51106F6B02B0498C68CDB |
| SHA-1 | 7534C8B06EB153BB0FFC86BA3E9278DD7EF57116 |
| SHA-256 | F4B29864844E0053105C03FC444161E87ECEFECDC6CF5B44CC219BEA6FE8A97D |
| SSDEEP | 24:rug0KHBC9BQV7oAVCiofziB6KHuGl6uocDT6FqUyCcjUStbUn:rZzB2BK7oAV4bvKHuo6uocDT6FqHsStw |
| TLSH | T17611933FE0353F3B084B94C9C0B22A0448FBEE64A3B0894EE51BA2441FA25E5D3234D7 |
| Key | Value |
|---|---|
| FileName | ./sbin/audisp-prelude |
| FileSize | 48376 |
| MD5 | 23B111D4A74ED0BE4DC19CFD079BCAC1 |
| SHA-1 | 77BD5B693D7E46BBCA3E526C89384C3A62FFCD05 |
| SHA-256 | 7747EDCD5ADFAB7C734057960A0023A02B38B33B60C4D1DA614BE6835CBB997F |
| SSDEEP | 768:dsnBhhAFLVy7mL046h8aUztyAUhDWMvlKm4xHBQaX:dseDk1UByrhDWMdKB9X |
| TLSH | T18823F947B69015FDC1E4C77494D692229EB07410C660E71F721A5EB83E22B988F1FFBA |